On 06/09/2016 09:59 PM, Daniel Kahn Gillmor wrote: > Perhaps the better approach is to have a one-time tool that can either > (a) translate your encrypted messages into a newer encrypted form > (e.g. replacing the PKESK packets with ones encrypted to a newer, > stronger key), or (b) extracting the session key from the encrypted > object and storing it in a separate lookup table, so that the old secret > key isn't relevant any longer. > > Either of these approaches would also be useful to people who want to > destroy their old secret key material without losing access to their > data, while making it harder for people to start interacting with > bad/old keys.
Such a tool would indeed be nice. Have you come across one or know of one? It's probably not straightforward, giving the many formats this data comes in (inline in e-mails, textfiles, PGP/MIME, …) kwadronaut
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
