Saga of compiling gnupg

2011-01-02 Thread Mel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 About a week ago I updated to claws-mail-3.7.8 which broke my pgpcore etc. plugins. Thus leaving me without a means to decrypt all my passwords. I upgraded to gnupg-2.0.16...would configure but not MAKE. I then tried gnupg-2.0.15...same thi

Re: Signing

2011-01-02 Thread Grant Olson
On 1/2/2011 7:19 PM, Robert J. Hansen wrote: > On 1/2/2011 7:11 PM, takethe...@gmx.de wrote: >> When signing a public key's user ID, the statement I'm making is: "I >> believe that this key belongs to the person described by the name and >> the comment in the user ID." > > There is no fixed semant

Re: Signing

2011-01-02 Thread Robert J. Hansen
On 1/2/2011 7:11 PM, takethe...@gmx.de wrote: > When signing a public key's user ID, the statement I'm making is: "I > believe that this key belongs to the person described by the name and > the comment in the user ID." There is no fixed semantic meaning for a signature. Each signer is responsibl

Re: Signing

2011-01-02 Thread takethebus
Hi everybody, I have a question about the meaning of signing, I'd be happy if someone checked whether my understanding is write: When signing a public key's user ID, the statement I'm making is: "I believe that this key belongs to the person described by the name and the comment in the user ID

AUTO: Richard Hamilton is out of the office (returning 01/03/2011)

2011-01-02 Thread Richard Hamilton
I am out of the office until 01/03/2011. I am out of the office until Monday January 3rd, 2011. If this is a production problem, please call the solution center at 918-573-2336 or email Bob Olson at robert.ol...@williams.com. I will have limited mail and cell phone access. Note: This is an au

Re: Fingerprint useless if not self-signed key?

2011-01-02 Thread Grant Olson
On 1/2/2011 11:04 AM, takethe...@gmx.de wrote: > And thankfully David Shaw answerd: > >>> By default, yes. You can override this, >>> but it is not a good idea. > > Thus the answer to the question, whether one needs to check whether the key > is self-signed is conneced with the word "override"

Re: Is self-signing necessary? Basic questions.

2011-01-02 Thread David Shaw
On Jan 2, 2011, at 2:43 PM, Daniel Kahn Gillmor wrote: > On 01/02/2011 10:01 AM, David Shaw wrote: >> The only significant use of the direct-key signature is for key owners >> to add designated revokers to their key. Designated revokers are carried >> in a subpacket on a direct key signature. >

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread Ricky Zhou
On 2011-01-02 03:14:06 PM, Neil Phillips wrote: > i was hoping to do the following; > locate a source file. > place the name of the source file in a log. > encrypt the source file name and contents > add to the log the name of the encrypted file. > > that way i have a list which tells me what the

Re: Is self-signing necessary? Basic questions.

2011-01-02 Thread Daniel Kahn Gillmor
On 01/02/2011 10:01 AM, David Shaw wrote: > The only significant use of the direct-key signature is for key owners > to add designated revokers to their key. Designated revokers are carried > in a subpacket on a direct key signature. I think a revocation certificate (that is, revoking the primary

Re: Signing

2011-01-02 Thread Hauke Laging
Am Sonntag 02 Januar 2011 19:36:02 schrieb takethe...@gmx.de: > >> How is this "connection" done? > > > > By a self-signature. Same for the subkeys. > > Sorry, I don't understand what you mean. Could you please explain it again? > Let's say Alice signs Bob's user ID together with Bob's public ma

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread Atom Smasher
On Sun, 2 Jan 2011, Neil Phillips wrote: gpg should be able to give a hash, something like; gpg -output sha1("a filename") -e filename === depending on your [*nix or cygwin] shell, it ~can~ do that... gpg -o $(sha1 -qs filename) -e filename -r keyid the exact command is system de

Re: Signing

2011-01-02 Thread takethebus
>> Hauke Laging thankfully answered: >> >>[No], you always sign the key together >> >> with a UID. gpg --list-sigs shows >> >> this to you: The root entry is pub, the uids are the next level >> >>("connected" to pub) and the signatures refer to UIDs. >> How is this "connection" done? > By a sel

GnuPG smart card w/ Dell keyboard

2011-01-02 Thread Tom Simons
Has anyone used the GnuPG smart card with a Dell Smartcard USB Keyboard? The GnuPG doc at http://www.gnupg.org/howtos/card-howto/en/ch02s02.html just lists the Cherry XX44 USB keyboard. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnup

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread Neil Phillips
Neil Phillips gmail.com> writes: > > > gpg should be able to give a hash, something like; > gpg -output sha1("a filename") -e filename > or rather something like; type sha1(filename)| gpg -o 0 -e filename or echo sha1(filename)| gpg -o 0 -e filename

Re: Signing

2011-01-02 Thread Hauke Laging
Am Sonntag 02 Januar 2011 17:36:52 schrieb takethe...@gmx.de: > Hauke Laging thankfully answered: > >>[No], you always sign the key together with a UID. gpg --list-sigs shows > >> >>this to you: The root entry is pub, the uids are the next level > >>("connected" to pub) and the signatures refer to

Re: Default GPG Encryption Algorithm (symmetric cipher) is?

2011-01-02 Thread Tiago Faria
On Sun, 02 Jan 2011 07:15:25 -0500 Mike Acker wrote: > is: how does S9 equate to AES256 ? there has to be a way to find the > equivalence between the verbose codes and the short hand Hi Mike, $ gpg --verbose --version will tell you (after the cipher/algorithm and between ()) what is the short

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread Neil Phillips
Atom Smasher smasher.org> writes: > just hash the file-name. > > SHA1 ("secret-1.txt") = d422b71f32b06168db114638fa9778c42d7d0f3c > SHA1 ("secret-2.txt") = d0ab019ba1975dab7c100bc5b4efa020bcd86a5d > SHA1 ("secret-3.txt") = 753b2bd68f7ff5fc44f9142245039375a3a5b2f8 > > use the hash as the e

Re: Default GPG Encryption Algorithm (symmetric cipher) is?

2011-01-02 Thread Tiago Faria
On Sun, 02 Jan 2011 05:35:23 -0500 "Robert J. Hansen" wrote: > It will respect default-cipher-preference. Certificate prefs are not > used during symmetric encryption, since certs themselves are not used > at all. Indeed Robert. Thanks for pointing that out. I only noticed that certs were not

Re: Is self-signing necessary? Basic questions.

2011-01-02 Thread Hauke Laging
Am Sonntag 02 Januar 2011 13:27:23 schrieb MFPA: > 2. What statement would such a signature actually be making? The same statement like a signature of a useless UID (without useful name and email address) like "fubar". Leaving out a useless UID can hardly change anything. The formal statement i

Fingerprint useless if not self-signed key?

2011-01-02 Thread takethebus
Hi everybody, and thanks for the answers so far! I'm goint to write an introduction to GnuPG/PGP and therefor I'm trying to understand some concepts. Especially I wonder what I'll tell people about the meaning of the fingerprint. From my point of view a fingerprint-check is useless, if the ke

Signing

2011-01-02 Thread takethebus
Hi everybody, In an former email (Subject: "Is self-signing necessary? Basic questions.") I asked: > When signing another key, what I do is to ONLY sign the other person's > public master signing key with my own private master signing key. I don't > sign a certain user ID or something. Is that

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread Atom Smasher
On Sun, 2 Jan 2011, Neil Phillips wrote: i was hoping to do the following; locate a source file. place the name of the source file in a log. encrypt the source file name and contents add to the log the name of the encrypted file. that way i have a list which tells me what the real name of the f

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread David Shaw
On Jan 2, 2011, at 10:06 AM, Neil Phillips wrote: > SecureZip will take a file and encrypt both the filename and the file. > > so far with GnuPG i can only see how to encrypt the file. > > i do not want to use a specific name as there are too many files to do that. > i want something like; > >

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread Neil Phillips
David Shaw jabberwocky.com> writes: > Note that GPG does save the original ("mySecrets.txt" in your example) filename inside the encrypted > bundle. It does not, however, use it when decrypting later. See the --use-embedded-filename option if > you want to use that, but read the caveats in the

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread David Shaw
On Jan 2, 2011, at 7:37 AM, Neil Phillips wrote: > Hi, > I'm completely new to GnuPG. > Can someone tell me how I can encrypt the name of the file that I want to > encrypt please. > > Example: > mySecrets.txt [a plain text file] > > I would like: > szstt.asd [some 'apparently random name' file]

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread Neil Phillips
SecureZip will take a file and encrypt both the filename and the file. so far with GnuPG i can only see how to encrypt the file. i do not want to use a specific name as there are too many files to do that. i want something like; gpg -recipient "Neil Phillips" -output_encrypt "mySecrets.txt" -enc

Re: Is self-signing necessary? Basic questions.

2011-01-02 Thread David Shaw
On Jan 2, 2011, at 7:27 AM, MFPA wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi > > > On Sunday 2 January 2011 at 5:05:06 AM, in > , David Shaw > wrote: > >> There is a way to sign a key alone, without signing any >> user IDs. Nobody supports it for 3rd party signatures >>

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread Julian H. Stacey
Hi, Reference: > From: Neil Phillips > Date: Sun, 2 Jan 2011 12:37:05 + (UTC) > Message-id: Neil Phillips wrote: > Hi, > I'm completely new to GnuPG. > Can someone tell me how I can encrypt the name of the file that I want to > encrypt please. > > Example: > mySecrets.t

Re: Having trouble getting GPG to accept input from a pinpad

2011-01-02 Thread Simon Josefsson
Paul Richard Ramer writes: > Hi, > > I am using an OpenPGP v2 card with an SCM SPR-532 smartcard reader, and > I can't get GPG to take a PIN from the pinpad instead of the keyboard. > When I run "gpg --card-edit" followed by any command that requires a PIN > or Admin PIN, I get a password dialog

Re: Encryting both file contents and file name with GnuPG

2011-01-02 Thread Gregor Zattler
Hi Neil, * Neil Phillips [02. Jan. 2011]: > Can someone tell me how I can encrypt the name of the file that I want to > encrypt please. > > Example: > mySecrets.txt [a plain text file] > > I would like: > szstt.asd [some 'apparently random name' file] [file contents encrypted] You may invoke gn

Default GPG Encryption Algorithm (symmetric cipher) is?

2011-01-02 Thread Mike Acker
Many Thanks to Tiago Faria Date:Sun, 2 Jan 2011 05:57:00 + for excellent notes on editing GPG Keys. I had found neither GPA nor Kleo to have all of the edit capability that should be available for a key and in particular on the User ID and preferences for symetric ciphers the key to this is

Re: Is self-signing necessary? Basic questions.

2011-01-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Sunday 2 January 2011 at 4:09:48 AM, in , Hauke Laging wrote: >> Can signatures be removed from a key again? > Yes, that is easily possible: 1) --edit-key 2) if > needed: uid ... 3) delsig If the key has been sent to a keyserver or to ano

Re: Is self-signing necessary? Basic questions.

2011-01-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Sunday 2 January 2011 at 5:05:06 AM, in , David Shaw wrote: > There is a way to sign a key alone, without signing any > user IDs. Nobody supports it for 3rd party signatures > like these. That brings two questions to my mind. 1. How would

Encryting both file contents and file name with GnuPG

2011-01-02 Thread Neil Phillips
Hi, I'm completely new to GnuPG. Can someone tell me how I can encrypt the name of the file that I want to encrypt please. Example: mySecrets.txt [a plain text file] I would like: szstt.asd [some 'apparently random name' file] [file contents encrypted] I see that secureZip can do this, I have us

Re: Default GPG Encryption Algorithm (symmetric cipher) is?

2011-01-02 Thread frankexchange
Thanks to everyone for providing tips, I found the answer at: "The default symmetric cipher used is CAST5" http://www.gnupg.org/documentation/manuals/gnupg/Operational-GPG-Commands.html and used the Ubuntu Terminal to list the ciphers used: Home: ~/.gnupg Supported algorithms: Pubkey: RSA, RSA-

Having trouble getting GPG to accept input from a pinpad

2011-01-02 Thread Paul Richard Ramer
Hi, I am using an OpenPGP v2 card with an SCM SPR-532 smartcard reader, and I can't get GPG to take a PIN from the pinpad instead of the keyboard. When I run "gpg --card-edit" followed by any command that requires a PIN or Admin PIN, I get a password dialog box from pinentry, but I can only enter

Re: Default GPG Encryption Algorithm (symmetric cipher) is?

2011-01-02 Thread Robert J. Hansen
On 1/2/2011 12:57 AM, Tiago Faria wrote: > If it uses GnuPG, then it will respect the rules set by your keyring > preferences. You can check the preferences with the command: It will respect default-cipher-preference. Certificate prefs are not used during symmetric encryption, since certs themsel

Re: Default GPG Encryption Algorithm (symmetric cipher) is?

2011-01-02 Thread Larry Brower
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 01/02/2011 12:14 AM, frankexcha...@nospammail.net wrote: > As mentioned I am a Linux newbie (command line adverse) and like many > users of Ubuntu they would not know how access details of what the > default symmetric cipher is. > > Use of the te

Re: Default GPG Encryption Algorithm (symmetric cipher) is?

2011-01-02 Thread Robert J. Hansen
On 1/2/2011 1:14 AM, frankexcha...@nospammail.net wrote: > Use of the term "default" was provided to mean the one GPG uses without > any user intervention IE: Default And the answer here is exactly what I said: whatever you tell it to be. Computers are complex beasts. Two installations of the sa