old pgp2.6x keys imported in gpg (compile pgp 2.6)

2014-01-28 Thread Uwe Brauer
Hello I have a problem to import my secret key into a iOS app called iPGmail. The problem is that of course the key is password protected and the app seem to have difficulties with the password. So I just deleted the password and then can import the secret key, but I don't like this

Re: old pgp2.6x keys imported in gpg (compile pgp 2.6)

2014-01-28 Thread David Shaw
On Jan 28, 2014, at 9:37 AM, Uwe Brauer o...@mat.ucm.es wrote: Hello I have a problem to import my secret key into a iOS app called iPGmail. The problem is that of course the key is password protected and the app seem to have difficulties with the password. So I just deleted the

Re: old pgp2.6x keys imported in gpg (compile pgp 2.6)

2014-01-28 Thread vedaal
On Tuesday, January 28, 2014 at 9:43 AM, Uwe Brauer o...@mat.ucm.es wrote: The cipher for the key protection is CAST5 However the key was originally generated with pgp 2.6.2 more than 10 years ago (yes I know it is only 1024 bit long and should not be used anymore), but could it be that such a

Re: old pgp2.6x keys imported in gpg (compile pgp 2.6)

2014-01-28 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 01/28/2014 03:37 PM, Uwe Brauer wrote: Hello I have a problem to import my secret key into a iOS app called iPGmail. The problem is that of course the key is password protected and the app seem to have difficulties with the password.

Re: old pgp2.6x keys imported in gpg (compile pgp 2.6)

2014-01-28 Thread Uwe Brauer
Kristian == Kristian Fiskerstrand kristian.fiskerstr...@sumptuouscapital.com writes: http://www.kfwebs.net/articles/article/42/GnuPG-2.0---IDEA-support #secure method=smime mode=sign cool, thanks! smime.p7s Description: S/MIME cryptographic signature

Re: GPG and PGP

2011-03-17 Thread Johan Wevers
hope so, but this isn't an easy job. I remember it has been discussed here before. -- ir. J.C.A. Wevers // Physics and science fiction site: joh...@vulcan.xs4all.nl // http://www.xs4all.nl/~johanw/index.html PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html

Re: GPG and PGP

2011-03-17 Thread Ingo Klöcker
On Wednesday 16 March 2011, Mark H. Wood wrote: On Wed, Mar 16, 2011 at 09:15:45AM +0100, Johan Wevers wrote: Op 15-3-2011 21:32, Ben McGinnes schreef: That's probably a worthwhile discussion to have. Even if RFC1991 support is maintained, there's still value in migrating encrypted

Re: GPG and PGP

2011-03-17 Thread Ingo Klöcker
On Wednesday 16 March 2011, Johan Wevers wrote: Op 15-3-2011 21:57, Ingo Klöcker schreef: Why migrate away? Even if GnuPG 3 stops supporting RFC1991 there will always be GnuPG 1 and GnuPG 2 around to decrypt ancient data and verify signatures made decades ago. If that is the case, you

Re: GPG and PGP

2011-03-16 Thread Johan Wevers
have used pgp 2 died out, which means for another century or so (ignoring corporate users). Which is probably in any IT planning the same as forever. -- ir. J.C.A. Wevers // Physics and science fiction site: joh...@vulcan.xs4all.nl // http://www.xs4all.nl/~johanw/index.html PGP/GPG public

Re: GPG and PGP

2011-03-16 Thread Johan Wevers
) or, very unlikely, 128 bit can be brute-forced in the future. For now, I trust my most secret data to 128 bit strength. -- ir. J.C.A. Wevers // Physics and science fiction site: joh...@vulcan.xs4all.nl // http://www.xs4all.nl/~johanw/index.html PGP/GPG public keys at http://www.xs4all.nl

Re: GPG and PGP

2011-03-16 Thread Johan Wevers
. Wevers // Physics and science fiction site: joh...@vulcan.xs4all.nl // http://www.xs4all.nl/~johanw/index.html PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html ___ Gnupg-users mailing list Gnupg-users@gnupg.org http

Re: GPG and PGP

2011-03-16 Thread Werner Koch
On Wed, 16 Mar 2011 06:33, b...@adversary.org said: Okay, so that would cover 3DES too? Surely there can't be many No. DES and thus 3DES have a blocksize of 64 bit. The blocksize is not related to the keysize. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein

Re: GPG and PGP

2011-03-16 Thread Ben McGinnes
On 16/03/11 8:50 PM, Werner Koch wrote: On Wed, 16 Mar 2011 06:33, b...@adversary.org said: Okay, so that would cover 3DES too? Surely there can't be many No. DES and thus 3DES have a blocksize of 64 bit. The blocksize is not related to the keysize. Ah, right, got it. Thanks.

Re: GPG and PGP

2011-03-16 Thread Mark H. Wood
On Wed, Mar 16, 2011 at 09:15:45AM +0100, Johan Wevers wrote: Op 15-3-2011 21:32, Ben McGinnes schreef: That's probably a worthwhile discussion to have. Even if RFC1991 support is maintained, there's still value in migrating encrypted data to more robust algorithms. Only if IDEA gets

Re: GPG and PGP

2011-03-16 Thread Johan Wevers
. It would be best to have already done so. That, however, is true for any crypto algorithm, not specifically for IDEA. -- ir. J.C.A. Wevers // Physics and science fiction site: joh...@vulcan.xs4all.nl // http://www.xs4all.nl/~johanw/index.html PGP/GPG public keys at http://www.xs4all.nl

GPG and PGP

2011-03-16 Thread vedaal
David Shaw dshaw at jabberwocky.com wrote on Wed Mar 16 00:42:48 CET 2011 : GnuPG does the MDC by default whenever all the keys can handle it What kind of key can't handle it in gnupg? I sent messages to all key types, including v3 keys, using the forced MDC, (my preferred cipher is 3DES,

Re: GPG and PGP

2011-03-16 Thread Jeffrey Walton
On Wed, Mar 16, 2011 at 9:41 AM, ved...@nym.hush.com wrote: David Shaw dshaw at jabberwocky.com wrote on Wed Mar 16 00:42:48 CET 2011 : GnuPG does the MDC by default whenever all the keys can handle it What kind of key can't handle it in gnupg? I sent messages to all key types, including

Re: GPG and PGP

2011-03-16 Thread Robert J. Hansen
On 3/16/2011 10:05 AM, Jeffrey Walton wrote: 2 key or 3 key? 2TDEA only provides about 80 bits of security, and is usually not recommend for use. The OpenPGP spec requires three-key 3DES, and GnuPG conforms to the spec. ___ Gnupg-users mailing list

Re: GPG and PGP

2011-03-16 Thread David Shaw
On Mar 16, 2011, at 9:41 AM, ved...@nym.hush.com wrote: David Shaw dshaw at jabberwocky.com wrote on Wed Mar 16 00:42:48 CET 2011 : GnuPG does the MDC by default whenever all the keys can handle it What kind of key can't handle it in gnupg? None. It's not a key type, but a

Re: GPG and PGP

2011-03-16 Thread David Shaw
On Mar 16, 2011, at 10:05 AM, Jeffrey Walton wrote: On Wed, Mar 16, 2011 at 9:41 AM, ved...@nym.hush.com wrote: David Shaw dshaw at jabberwocky.com wrote on Wed Mar 16 00:42:48 CET 2011 : GnuPG does the MDC by default whenever all the keys can handle it What kind of key can't handle

re: GPG and PGP

2011-03-16 Thread vedaal
Johan Wevers johanw at vulcan.xs4all.nl wrote on Wed Mar 16 09:16:56 CET 2011 : Current OSes pose already a problem. PGP 2 did not provide nagtive binaries for win32 so I compiled them myself I've had a problem running Disastry's PGP 2.6.3 multi6 on 64 bit windows systems, because the DOS

Re: GPG and PGP

2011-03-15 Thread Werner Koch
On Mon, 14 Mar 2011 17:53, ved...@nym.hush.com said: Disastry's signature is on the ideadll file in the ideadll.zip file on his site. So you trust some binary blob? .-) Is that your signature on the idea.c module from key ID 621CC013 ? Yes. Back in 1997 I implemented PGP 2 compatible code

Re: GPG and PGP

2011-03-15 Thread Aaron Toponce
On Tue, Mar 15, 2011 at 10:22:45AM +0100, Werner Koch wrote: Yes. Back in 1997 I implemented PGP 2 compatible code as the first towards GPG. Obviously I needed IDEA and RSA for testing. That is the reason why we have this code at all. Later a lot of people demanded that IDEA and RSA should

Re: GPG and PGP

2011-03-15 Thread Robert J. Hansen
3. Both IDEA and IDEA NXT don't meet the rigor of many of today's open algos. Substitute safety margin for rigor and I'll agree with you. IDEA is a competent design by credible people and has had a whole lot of people beating on it to only limited degrees of success: it seems to me they've

Re: GPG and PGP

2011-03-15 Thread Johan Wevers
Op 15-3-2011 14:19, Aaron Toponce schreef: 1. The U.S. patent expires for IDEA on January 7, 2012. I propose to include the IDEA module then in GnuPG 1.4.12 and 2.2.(then current + 1), just like the extra version that came out when the RSA patent expired. 2. IDEA has already been succeeded by

Re: GPG and PGP

2011-03-15 Thread Johan Wevers
Op 15-3-2011 15:55, Aaron Toponce schreef: Using this line of logic, web developers should continue support for IE6. I would not mind them using fallbacks when it doesn't hinder other code or bloat things. This last requirement, however, is in web development much more difficult to achieve

Re: GPG and PGP

2011-03-15 Thread Aaron Toponce
On Tue, Mar 15, 2011 at 04:14:25PM +0100, Johan Wevers wrote: I don't know, but I do know that adding IDEA does not complicate or bloat GnuPG. You're probably right. I guess I just don't understand supporting dead, deprecated, proprietary technology, bloat or no bloat. -- . o . o . o . .

Re: GPG and PGP

2011-03-15 Thread Johan Wevers
Op 15-3-2011 16:29, Aaron Toponce schreef: I don't know, but I do know that adding IDEA does not complicate or bloat GnuPG. You're probably right. I guess I just don't understand supporting dead, deprecated, proprietary technology, bloat or no bloat. IDEA is far from dead. I have

Re: GPG and PGP

2011-03-15 Thread Robert J. Hansen
On 3/15/11 3:53 PM, Ben McGinnes wrote: It's simple, data which may have been encrypted 15+ years ago may still have value to the people who encrypted it, even if they have since chosen to move from older programs (e.g. PGP 2.x) for their current needs. This may not be so much an argument

Re: GPG and PGP

2011-03-15 Thread vedaal
David Shaw dshaw at jabberwocky.com wrote on Tue Mar 15 15:34:47 CET 2011 : would like to see IDEA included once the various patents expire As long as the non-256 bit symmetrical algorithms (IDEA, CAST5, 3DES, BLOWFISH) will remain part of open PGP, and the MDC needs revision eventually to

Re: GPG and PGP

2011-03-15 Thread Ben McGinnes
On 16/03/11 7:16 AM, Robert J. Hansen wrote: On 3/15/11 3:53 PM, Ben McGinnes wrote: It's simple, data which may have been encrypted 15+ years ago may still have value to the people who encrypted it, even if they have since chosen to move from older programs (e.g. PGP 2.x) for their

Re: GPG and PGP

2011-03-15 Thread Ingo Klöcker
On Tuesday 15 March 2011, Robert J. Hansen wrote: On 3/15/11 3:53 PM, Ben McGinnes wrote: It's simple, data which may have been encrypted 15+ years ago may still have value to the people who encrypted it, even if they have since chosen to move from older programs (e.g. PGP 2.x) for their

Re: GPG and PGP

2011-03-15 Thread David Shaw
On Mar 15, 2011, at 4:24 PM, ved...@nym.hush.com wrote: David Shaw dshaw at jabberwocky.com wrote on Tue Mar 15 15:34:47 CET 2011 : would like to see IDEA included once the various patents expire As long as the non-256 bit symmetrical algorithms (IDEA, CAST5, 3DES, BLOWFISH) will remain

Re: GPG and PGP

2011-03-15 Thread vedaal
David Shaw dshaw at jabberwocky.com wrot on Tue Mar 15 22:28:23 CET 2011 : I'm not quite sure what you mean. The MDC can be used on any OpenPGP cipher, no matter what the size. Yes, but it's done by gnupg by default for 256 bit ciphers, while it needs the option of '--force-mdc' for non-256

Re: GPG and PGP

2011-03-15 Thread Ben McGinnes
On 16/03/11 10:42 AM, David Shaw wrote: GnuPG does the MDC by default whenever all the keys can handle it (or if the chosen cipher is 256 bits) Is that 256 bits only or 256 bits and larger? Regards, Ben signature.asc Description: OpenPGP digital signature

Re: GPG and PGP

2011-03-15 Thread David Shaw
On Mar 15, 2011, at 11:41 PM, David Shaw wrote: On Mar 15, 2011, at 11:28 PM, Ben McGinnes wrote: On 16/03/11 10:42 AM, David Shaw wrote: GnuPG does the MDC by default whenever all the keys can handle it (or if the chosen cipher is 256 bits) Is that 256 bits only or 256 bits and

Re: GPG and PGP

2011-03-15 Thread David Shaw
On Mar 15, 2011, at 11:28 PM, Ben McGinnes wrote: On 16/03/11 10:42 AM, David Shaw wrote: GnuPG does the MDC by default whenever all the keys can handle it (or if the chosen cipher is 256 bits) Is that 256 bits only or 256 bits and larger? Strictly speaking, it's anything with a cipher

Re: GPG and PGP

2011-03-15 Thread Ben McGinnes
On 16/03/11 2:37 PM, Robert J. Hansen wrote: On 3/15/2011 11:28 PM, Ben McGinnes wrote: Is that 256 bits only or 256 bits and larger? Given there are no symmetric ciphers in OpenPGP that use more than a 256-bit key, I think the answer here is yes. :) Heh. For some reason my brain was

GPG and PGP

2011-03-14 Thread Gloria.Teo
a passphrase to unlock the secret key for user: epflpepfl 1024-bit DSA key, ID B5AC473D, created 2003-01-09 gpg: cancelled by user Can't edit this key: General error How can I unlock the secret key? Please help! Still trying hard to figure pgp and gpg out. gpg-amateur

Re: GPG and PGP

2011-03-14 Thread vedaal
Gloria.Teo at bit.admin.ch Gloria.Teo at bit.admin.ch wrote on Mon Mar 14 11:23:26 CET 2011 : gpg: epflpepfl: preference for cipher algorithm 1 Cipher Algorithm 1 is IDEA, and was used as a default cipher for RSA keys by 6.5.8 GnuPG does not use IDEA although it will accept the IDEA module.

Re: GPG and PGP

2011-03-14 Thread Werner Koch
On Mon, 14 Mar 2011 15:50, ved...@nym.hush.com said: (btw, Disastry is the one who wrote the IDEA.dll module, specifically to bridge the gap between gnupg and pgp users.) Hmmm, the signature claims that I wrote it. However, I still recommend not to use it. Salam-Shalom, Werner -- Die

Re: GPG and PGP

2011-03-14 Thread vedaal
iOn Mon, 14 Mar 2011 11:50:29 -0400 Werner Koch w...@gnupg.org wrote: On Mon, 14 Mar 2011 15:50, ved...@nym.hush.com said: (btw, Disastry is the one who wrote the IDEA.dll module, specifically to bridge the gap between gnupg and pgp users.) Hmmm, the signature claims that I wrote it. I

Re: GPG and PGP Compatibility

2006-10-18 Thread Werner Koch
On Tue, 17 Oct 2006 23:18, Ryan Malayter said: file extension for encrypted files, whereas PGP Corp.'s products use .pgp. But that can be overcome with configuration settings, either in one of the programs, or by telling Windows what programs to associate with which file extensions. An easy

Re: GPG and PGP Compatibility

2006-10-18 Thread Alphax
Alphax wrote: re: setting the extension in Enigmail I've filed an RFE at http://bugzilla.mozdev.org/show_bug.cgi?id=15442. Well, apparantly it's already doable: You can set this with the following two preferences in about:config (or in Thunderbird via Preferences/Advanced/Config Editor):

Re: GPG and PGP Compatibility

2006-10-18 Thread Patrick Brunschwig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alphax wrote: Conan Purves wrote: Hello everybody, snip When I encode attachments, it gives them a .gpg suffix. My colleagues who are using PGP Desktop cannot decode those files. Though I can decode their files, either using the gpgee

Re: GPG and PGP Compatibility (Conan Purves)

2006-10-18 Thread vedaal
Date: Tue, 17 Oct 2006 13:09:21 -0400 From: Conan Purves [EMAIL PROTECTED] Subject: GPG and PGP Compatibility have thus found Gnupg using the gpg4win front end, running through the Enigmail extension on Thunderbird. My last problem, I believe, is attachments. using gpg4win

Re: GPG and PGP Compatibility (vedaal)

2006-10-18 Thread vedaal
On Wed, 18 Oct 2006 05:04:14 -0400 [EMAIL PROTECTED] wrote: Send Gnupg-users mailing list submissions to [7] open file.asc using winpt's file manager, forgot to mention, it can also be done using gpgee, and the signature will be verified, and the file saved vedaal Concerned about your

GPG and PGP Compatibility

2006-10-17 Thread Conan Purves
through enigmail. Practically speaking, is there a solution for this? My colleagues are most likely going to want to continue using PGP Desktop. Theoretically speaking, what is the difference between PGP and GPG? Is it just a different management tool handling the same encryption algorithm

Re: GPG and PGP Compatibility

2006-10-17 Thread Michael Kallas
Hi, Conan Purves schrieb: Hello everybody, I am the office manager here and trying to set up a compatible PGP for some of the employees. I am looking for an open-source, free non-corporate version of the software and have thus found Gnupg using the gpg4win front end, running through the

Re: OpenPGP vs. GnuPG (was: GPG and PGP Compatibility)

2006-10-17 Thread Michael Kallas
Hi, Conan Purves schrieb: Theoretically speaking, what is the difference between PGP and GPG? Is it just a different management tool handling the same encryption algorithm or is there some further translation between the two? They are two tools sharing the principles of public-key

Re: GPG and PGP Compatibility

2006-10-17 Thread Alphax
Conan Purves wrote: Hello everybody, snip When I encode attachments, it gives them a .gpg suffix. My colleagues who are using PGP Desktop cannot decode those files. Though I can decode their files, either using the gpgee contextual menu or automatically through enigmail. Practically