Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Binarus
On 28.05.2020 23:21, Stefan Claas wrote: > > while it is not my business, I do not understand why you have to take > care about the Thunderbird issue, as a users and not the > Aufsichtsbehörde ... If for example you have a job at the > Aufsichtsbehörde then ok, like I said, I would contact gnupg

Re: libgcrypt: random source via library on Linux?

2020-05-29 Thread Werner Koch via Gnupg-users
On Thu, 28 May 2020 14:43, Steffen Nurpmeso said: > ./configure \ > --prefix=/usr \ > --disable-padlock-support \ > --enable-static=yes > make > make DESTDIR=$PKG install That is pretty standard except for the --disable-padlock-support - why do you use this? P

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Stefan Claas
Binarus wrote: > > > On 28.05.2020 23:21, Stefan Claas wrote: > > > > while it is not my business, I do not understand why you have to > > take care about the Thunderbird issue, as a users and not the > > Aufsichtsbehörde ... If for example you have a job at the > > Aufsichtsbehörde then ok, l

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Werner Koch via Gnupg-users
On Tue, 26 May 2020 12:27, karel-v_g--- said: > Because of this I have been using a combination of Thunderbird, > Enigmail and Gpg4Win, as the latter one is certified by German BSI. Well, it is not certified but approved to handle data at the EU RESTRICTED level (BSI-VSA-10400 and 10412). There

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Alessandro Vesely via Gnupg-users
On Fri 29/May/2020 12:29:48 +0200 Stefan Claas wrote: > Binarus wrote: >> On 28.05.2020 23:21, Stefan Claas wrote: >>> >>> while it is not my business, I do not understand why you have to >>> take care about the Thunderbird issue, as a users and not the >>> Aufsichtsbehörde ... If for example you

Signature mismatch for secp256k1

2020-05-29 Thread Louis Holbrook
I'm trying to use gpg-agent to sign for cryptocurrency purposes, using the secp256k1 curve. I've tried a few hashes, but one of them gets a different resulting signature than other implementations. I've compared against libsecp256k1 and nodejs elliptic library. I won't post the code here, but I al

gpgAnon, draft 20150

2020-05-29 Thread LisToFacTor via Gnupg-users
The setup described in this "how-to" was originally put together and used (and possibly still is) quite a while ago, using Disastry's PGP 2.6.3ia-multi06 as the crypto back end. This guide has been composed from bits and pieces of the original user documentation, scissoring out the content that

Re: libgcrypt: random source via library on Linux?

2020-05-29 Thread Steffen Nurpmeso
Hello. Werner Koch wrote in <87sgfjrqf1@wheatstone.g10code.de>: |On Thu, 28 May 2020 14:43, Steffen Nurpmeso said: |> ./configure \ |> --prefix=/usr \ |> --disable-padlock-support \ |> --enable-static=yes |> make |> make DESTDIR=$PKG install | |That

Re: gpgAnon, draft 20150

2020-05-29 Thread Stefan Claas
LisToFacTor via Gnupg-users wrote: > The setup described in this "how-to" was originally put together > and used (and possibly still is) quite a while ago, using > Disastry's PGP 2.6.3ia-multi06 as the crypto back end. > > This guide has been composed from bits and pieces of the original > user

Re: gpgAnon, draft 20150

2020-05-29 Thread LisToFacTor via Gnupg-users
On 5/29/20 4:51 PM, Stefan Claas - s...@300baud.de wrote: how does Alice protects her Live-CD and USB stick, when she leaves home and Mallory gains access to them, so that for example the Live-CD can be exchanged? Live-CD is a "public resource", available from multiple locations on the 'net and

Re: gpgAnon, draft 20150

2020-05-29 Thread Stefan Claas
LisToFacTor via Gnupg-users wrote: > On 5/29/20 4:51 PM, Stefan Claas - s...@300baud.de wrote: > > how does Alice protects her Live-CD and USB stick, when she leaves > > home and Mallory gains access to them, so that for example the > > Live-CD can be exchanged? > Live-CD is a "public resource",

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread karel-v_g--- via Gnupg-users
Hello! No, I don't work for an Aufsichtsbehörde and (fortunately) I don't have to deal with them directly most time. But the Aufsichtsbehörde defines how my work has to be done and they have the right to inspect it. And one of the things they require is use recommended (e.g. BSI) software for ma

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Stefan Claas
karel-v_g--- via Gnupg-users wrote: Hi, > But it's a pity that > Thunderbird developed its own solution because of licensing issues > while we have a proven working solution with GnuPG... We never know, maybe in the future someone writes again a fully working solution for Thunderbird/GnuPG user

Re: libgcrypt: random source via library on Linux?

2020-05-29 Thread Steffen Nurpmeso
Hello Werner, all. Steffen Nurpmeso wrote in <20200529155411.tgyu1%stef...@sdaoden.eu>: |Werner Koch wrote in |<87sgfjrqf1@wheatstone.g10code.de>: ||On Thu, 28 May 2020 14:43, Steffen Nurpmeso said: ... |out for NAME_OF_DEV_*RANDOM at all .. hmm .. i must admit |random/rndlinux.c:_gcry_r

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Robert J. Hansen
>> But it's a pity that >> Thunderbird developed its own solution because of licensing issues >> while we have a proven working solution with GnuPG... > > We never know, maybe in the future someone writes again a fully working > solution for Thunderbird/GnuPG users. Over the last fifteen years

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Stefan Claas
Robert J. Hansen wrote: > >> But it's a pity that > >> Thunderbird developed its own solution because of licensing issues > >> while we have a proven working solution with GnuPG... > > > > We never know, maybe in the future someone writes again a fully > > working solution for Thunderbird/GnuPG

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Mark
One of the potential problems I can see is multiple key rings. which I have just recently discovered in my own setup. I have the "standard" key rings that GPG4Win/Enigmail use and then I discovered 2 unknown files in my gnupg directory. PAPubring.gpg and PAsecring.gpg. I eventually deduced they cam

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Robert J. Hansen
> Since you mention that you did support for Enigmail, do you have also > infos about the current status of Thunderbird development, i.e. > beta testing etc., regarding OpenPGP support, so that you may can tell > us what people can expect? Enigmail development has ended. The upcoming 2.2 is the f

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Stefan Claas
Robert J. Hansen wrote: > > Since you mention that you did support for Enigmail, do you have > > also infos about the current status of Thunderbird development, i.e. > > beta testing etc., regarding OpenPGP support, so that you may can > > tell us what people can expect? > > Enigmail development

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Barry Smith via Gnupg-users
Robert. I am a long-time version of many different versions of Thunderbird, enigmail, and multiple packages of gpg. If TB 78 is going to have native support of openGPG encryption, then the original person in the thread should be able to export all of the keys in their key rings, and import all of

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Robert J. Hansen
> If TB 78 is going to have native support of openGPG encryption, then the > original person in the thread should be able to export all of the keys > in their key rings, and import all of those keys into TB 78, or am I > missing one of the gotchas with > TV 78 and it's openGPG encryption support.

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Grzegorz Kulewski
W dniu 30.05.2020 o 01:07, Robert J. Hansen pisze: >> If TB 78 is going to have native support of openGPG encryption, then the >> original person in the thread should be able to export all of the keys >> in their key rings, and import all of those keys into TB 78, or am I >> missing one of the gotc

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Robert J. Hansen
> 1. Will key management and crypto happen in the same process as > IMAP/POP/SMTP, GUI, JavaScript and everything else? If so - do you > believe it's acceptable? It should be an easy learning curve for Enigmail users. That isn't the same as finding it acceptable, though. Back in the mid-'90s PGP

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Grzegorz Kulewski
W dniu 30.05.2020 o 01:26, Robert J. Hansen pisze: >> 1. Will key management and crypto happen in the same process as >> IMAP/POP/SMTP, GUI, JavaScript and everything else? If so - do you >> believe it's acceptable? > > It should be an easy learning curve for Enigmail users. That isn't the > same

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread Robert J. Hansen
> I wasn't asking if GUI is acceptable. I was asking if crypto and GUI > happen in the same process (the main TB process). Since they seem to > be using a library for PGP it's quite probable. And if so - is that > acceptable in your opinion? Oh! When you said "process", I read that as "workflow".

Re: Certified OpenPGP-encryption after release of Thunderbird 78

2020-05-29 Thread charlie derr
On 5/29/20 7:39 PM, Grzegorz Kulewski wrote: > Time to check Claws I think. i've found that claws, evolution, sylpheed and kmail all integrate seamlessly with gpg2 (using standard debian packages for everything) ~c -- Charlie Derr Director, Instructional Technology 413-528-7344 https://www