Re: Transfer subkey to other keyring

2013-09-11 Thread attila lendvai
Peter Lebbing wrote I believe once GnuPG has a secret key, it won't update it anymore with any subsequent imports. So to get the additional subkey, re-export the whole thing, delete the existing one on the other system and import your re-exported whole thing. i can confirm this. i've

Re: Why trust gpg4win?

2013-09-11 Thread Jan
On 10/09/2013 15:18, NdK wrote: You'd be exposed nearly to the same attack vectors. Plus some more (the ones that handle the extra layer), so you'd have to check more code. So what about using that free USB stack for AVR's to implement a flash device? You would be able to audit about

Re: Why trust gpg4win?

2013-09-11 Thread Pete Stephenson
On Wed, Sep 11, 2013 at 11:01 AM, Jan takethe...@gmx.de wrote: On 10/09/2013 15:18, NdK wrote: You'd be exposed nearly to the same attack vectors. Plus some more (the ones that handle the extra layer), so you'd have to check more code. So what about using that free USB stack for AVR's to

Re: message digest for signed emails

2013-09-11 Thread Maik Holtkamp
Hi, 0n 13/09/10@14:35 Daniel Kahn Gillmor told me: On 09/10/2013 02:23 PM, Adam Gold wrote: 'source ~/.mutt/gpg.rc' to the mutt config file. I also added sorry, i don't know much about mutt or how it integrates with gpg. maybe someone else on the list can help you with that, or you

Re: Upgrading keys to larger than 1024

2013-09-11 Thread AdamC
Thanks everyone - I will try contacting the people who have signed my keys by email and see what they say - I very rarely see them in real life. Regards, Adam On 10 September 2013 19:29, Daniel Kahn Gillmor d...@fifthhorseman.netwrote: On 09/10/2013 12:47 PM, AdamC wrote: I have keys that

--list-options show-notations does not work with --with-colons

2013-09-11 Thread Daniel Kahn Gillmor
I'm trying to programmatically look at the notations in all the self-sigs in an OpenPGP certificate. But: gpg --fingerprint --fingerprint --fixed-list-mode --list-options show-notations --with-colons --check-sigs $fpr does not show me the notations. if i omit --with-colons, then i get the

Re: --list-options show-notations does not work with --with-colons

2013-09-11 Thread Hauke Laging
Am Mi 11.09.2013, 10:07:30 schrieb Daniel Kahn Gillmor: Should i be able to see the notations when using --with-colons somehow? show-sig-subpackets is your friend. -- Crypto für alle: http://www.openpgp-schulungen.de/fuer/bekannte/ OpenPGP: 7D82 FB9F D25A 2CE4 5241 6C37 BF4B 8EEF 1A57 1DF5

Re: --list-options show-notations does not work with --with-colons

2013-09-11 Thread Daniel Kahn Gillmor
On 09/11/2013 11:56 AM, Hauke Laging wrote: Am Mi 11.09.2013, 10:07:30 schrieb Daniel Kahn Gillmor: Should i be able to see the notations when using --with-colons somehow? show-sig-subpackets is your friend. Thanks, that does produce a tremendous amount of info, and within it i can find

Support for additional ECC Curves in GnuPG (gcrypt)

2013-09-11 Thread Alexandre Dulaunoy
Hi Everyone, Do you know if someone is currently working to implement additional curves in ECC and especially to have an alternative to the NIST ones in gcrypt/GnuPG? and I was wondering if we are bound to the ones defined in: http://tools.ietf.org/html/rfc6637#section-11 Thank you, Cheers.

Is it possible to remove capabilities from an existing key?

2013-09-11 Thread Philip Jägenstedt
My public key has the default capabilities sign and certify. I've seen that some people have only the certify capability in order to be able to keep the main key offline most of the time. Is it technically possible to change the capabilities of an existing key, even if there's no way to do it via

Confirmation of cipher?

2013-09-11 Thread Jack Brennan
Hello, When one signs a message GnuGPG will add Hash:SHA1 or your preferred hash at the start of the message. However a similar line of text isn't available with an encrypted text block. Is the reason for this to hide as much information as possible from a possible attacker? Is there any

Re: Is it possible to remove capabilities from an existing key?

2013-09-11 Thread Hauke Laging
Am Mi 11.09.2013, 23:42:30 schrieb Philip Jägenstedt: My public key has the default capabilities sign and certify. I've seen that some people have only the certify capability in order to be able to keep the main key offline most of the time. It's of limited use to make a former online mainkey

Re: Is it possible to remove capabilities from an existing key?

2013-09-11 Thread Daniel Kahn Gillmor
On 09/11/2013 05:42 PM, Philip Jägenstedt wrote: My public key has the default capabilities sign and certify. I've seen that some people have only the certify capability in order to be able to keep the main key offline most of the time. Is it technically possible to change the capabilities

Where is ECC in gpg2 (specifically gnupg-2.0.21

2013-09-11 Thread Newton Hammet
Hello Everyone, I dutifully did ./configure, make, sudo make install for gunupg-2.0.21 after finally doing same for all its dependencies and then ran /usr/local/lib/gpg2 --expert --gen-key and all I got was this: newton@newton-desktop:~/gpg2_0_21/gnupg-2.0.21$ /usr/local/bin/gpg2 --expert

Re: Where is ECC in gpg2 (specifically gnupg-2.0.21

2013-09-11 Thread Daniel Kahn Gillmor
On 09/11/2013 11:43 PM, Newton Hammet wrote: Shouldn't I be seeing 1 or more ECC choices? GnuPG 2.1 (still currently in beta, afaict) is the first version to include ECC support for OpenPGP. the 2.0.x branch does not include ECC for OpenPGP. Regards, --dkg signature.asc