See if this helps... I don't use Winduhs so I don't know how
effective this is.
From: Graham <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: Graham <[EMAIL PROTECTED]>
Subject: GnuPG and PGP
Date: Wed, 15 Nov 2000 08:59:43 GMT
Hi there!
Let's see if I can help. I assume that you're using Windows 98 too...
When using PGP 6.x, you will need to have PGPtray running (in other
words, the Network Associates GUI). So do *not* use the command line
version of PGP 6.x.x. I would suggest that you use PGP 6.5.8, as this
has the ADK problem removed.
GnuPG under Windows has no access to keyservers, so you will have to
access keyservers through the NAI GUI too.
I'm not sure about GnuPG under Linux, but GnuPG under Windows requires
that you have your GnuPG keyring in your GnuPG directory. By default,
GnuPG should be in c:\GnuPG and your keyrings should be in this
directory. You can import your PGP keyring into GnuPG with the
respective command at the command line level through Dos, and then by
going to PGPtray ->Options->Files to specify the location of the
keyrings that PGP should access (personally, I have *both* sets of
keyrings on my PC, but then I'm beta testing some software which
accesses GnuPG, so I know it does work to duplicate them).
To verify a GnuPG signature, you will have to get a keyserver
supporting GnuPG to give you the key. I have added the server
http://search.keyserver.net on port 11371 to the list of keyservers in
PGP. This seems to handle most GnuPG keys. when you have imported a
key into your PGP keyring, you must get it imported into your GnuPG
keyring. If you have separate keyrings, this is the method.
a) Highlight the key in the PGP keyring, then copy it into the
clipboard.
b)Open up your text editor, and paste the key block into it. Then
save the key block with the suffix .asc in your GnuPG directory.
c)Go back to your PGP keyring, find the key, right click on it, and go
to Key Properties. Note the Key ID, omitting the first two digits "0x".
d)Go to Dos, and go to c:\GnuPG. Type in this command:
gpg --import-key [filename]
supposing the key had been saved as graham.asc, the command would be:
gpg --import-key c:\gnupg\graham.asc
e)To make this work, you will need to locally sign your key, too. The
command is:
gpg --lsign-key [key ID]
Now, back to your original question. You want to use PGP 6.x so you
can access IDEA keys. Most of the problems with GnuPG and IDEA relate
to those messages using PGP 2.6.x and there is still some
incompatibility with PGP 2.6.x and PGP 6.x under Windows (though not
as great as PGP 5.x). I have only found a problem in using keys
requested by remailers who insist upon PGP 2.6.x generated messages.
Of course, it depends upon your hard disk space, but perhaps the best
way of utilising IDEA in relation to GnuPG is to have PGP 2.6.3ai on
your PC, too. You will still have to have PGP 6.x on your PC
(effectively 3 versions of PGP with GnuPG) but it does work and there
are some good Windows front ends for PGP 2.6.3ai.
On a technical note, PGP 2.6.3ai uses the RSAREF library, not the RSA
IDEA algorithm patented by RSA in the States, and therefore is not
subject to the IDEA problem that GnuPG is skirting around by not
including it.
If you get any problems, please come back to me. May I suggest you
join PGP-Basics discussion list at http://www.egroups.com/group/PGP-Basics,
which does allow discussion of GnuPG as well as PGP, but it is on a
very much more friendly level. See you there?
Graham reply to: [EMAIL PROTECTED]
Please PGP/GnuPG sign mail for verification and encrypt for internet security
Regards,
-- Raju
>>>>> "Sandip" == Sandip Bhattacharya <[EMAIL PROTECTED]> writes:
Sandip> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Sandip> I want to use my gpg keys on a windoze machine running PGP
Sandip> elsewhere. I could import my GPG public keyring into
Sandip> it. How do i import the private keyring? I believe it is
Sandip> encrypted locally using an symmetric algorithm. Do I have
Sandip> to decrypt the keyring and then import it? if yes, then
Sandip> how do I do that?
Sandip> TIA, Sandip
Sandip> - -- - ------------------------------------- Sandip
Sandip> Bhattacharya sandipb @ bigfoot.com -
Sandip> ------------------------------------- -----BEGIN PGP
Sandip> SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment:
Sandip> For info see http://www.gnupg.org
Sandip> iD8DBQE6M9JuLbo5p3iZaVgRAhKDAJoDSLWTjbqbCtcQ1LrYJmTAFeBdLQCdHcjg
Sandip> b0YuRQ7tVEQ2e3XvzmtPX38= =liZU -----END PGP SIGNATURE-----
--
Raju Mathur [EMAIL PROTECTED] http://kandalaya.org/
----------------------------------------------
Find out more about this and other Linux India
mailing lists at http://lists.linux-india.org/
