So long, and thanks for all the fish.

2021-03-22 Thread Robert J. Hansen via Gnupg-users
There's a song I really enjoy[*] with a line that always hits me as being both beautiful and wise: "You talk far too much for someone so unkind." I first heard of the GNU Project and the Free Software Foundation in 1995. For twenty-six years I've supported the FSF and FSFE in a variet

Re: Weak encryption keys

2021-03-22 Thread Jacob Bachmeyer via Gnupg-users
jsmith9...@gmx.com wrote: [...] A private key protected by weak blowfish cipher is by no means more at risk compared to an unencrypted key, which GnuPG has no problem with. The difference is that you *know* an unencrypted key is lying around at risk of compromise, and you knowingly chose

Re: Weak encryption keys

2021-03-22 Thread jsmith9810--- via Gnupg-users
> The problem is that a private key protected by a weak cipher is still > potentially compromised if an attacker can get any copy of the key prior > to migrating it to a stronger cipher. In other words, if an attacker is > able to obtain your current key blob, the attacker can still compromise > y

Re: Weak encryption keys

2021-03-22 Thread Jacob Bachmeyer via Gnupg-users
jsmith9810--- via Gnupg-users wrote: Hello all, I have a private key protected by blowfish cipher that despite a random salt and several rounds of RIPEMD160 iterations is still considered "weak" by GnuPG and it refuses to do anything with it. When I try to import this key manually (--import),

Weak encryption keys

2021-03-22 Thread jsmith9810--- via Gnupg-users
Hello all, I have a private key protected by blowfish cipher that despite a random salt and several rounds of RIPEMD160 iterations is still considered "weak" by GnuPG and it refuses to do anything with it. When I try to import this key manually (--import), gpg throws a "weak encryption key" err