Re: Ohhhh jeeee: can't encode a 512 bit MD into a 608 bits frame

2015-05-27 Thread NIIBE Yutaka
On 05/22/2015 02:27 AM, Philip Jackson wrote: The key ID was 0x6e767393 It seems for me that this key has subkey of ECC, and that's the cause of your trouble. I think that we need to implement some compatibility feature in GnuPG 2.0 (and 1.4). Last month, I did a fix, but I think that more is

Re: installing version 2.1.4 in Debian 8.0 (Jessie)

2015-05-27 Thread Peter Lebbing
On 27/05/15 06:22, Rex Kneisley wrote: As a follow up. Since, version 1.4 is also installed, my assumption is that using gpg on the command line invokes 1.4, and using gpg2 on the command line invokes 2.x. Is my assumption correct? Yes. If so, is there any way to make the command gpg invoke

Re: Ohhhh jeeee: can't encode a 512 bit MD into a 608 bits frame

2015-05-27 Thread Philip Jackson
On 27/05/15 10:36, NIIBE Yutaka wrote: On 05/22/2015 02:27 AM, Philip Jackson wrote: The key ID was 0x6e767393 It seems for me that this key has subkey of ECC, and that's the cause of your trouble. You're right - this key has an ECC subkey for signing. I've imported this key into another

Re: Ohhhh jeeee: can't encode a 512 bit MD into a 608 bits frame

2015-05-27 Thread NIIBE Yutaka
Hello, Thank you for more information. On 05/27/2015 08:53 PM, Philip Jackson wrote: I tried to re-import it into the original desktop system to see if the problem recurred. (I should have done that before writing the last mail, to confirm fault). With the original desktop : gpg 1.4.16 and

Re: Random Seed for Generating PGP Keys

2015-05-27 Thread George Lee
Hi, I know that a CSPRNG is supposed to make this cryptographically secure Also, I may be wrong here -- it seems that CSPRNG sometimes refers to libgcrypt's Continuously Seeded and other times refers to Cryptographically Secure. Peace, community, justice, - George

Re: Ohhhh jeeee: can't encode a 512 bit MD into a 608 bits frame

2015-05-27 Thread Philip Jackson
On 27/05/15 15:05, NIIBE Yutaka wrote: It was done soon after 2.0.22. I think that 2.0.23 or later doesn't have this issue. The signature check is just skipped as unknown algo. One of the problems with using linux distribution packages. The latest for Ubuntu 1404 is 2.0.22-3ubuntu1.3 which I

Re: Random Seed for Generating PGP Keys

2015-05-27 Thread flapflap
George Lee: I'm not trying to generate multiple random numbers, but just generate a PGP key one time in a way that is very hard to crack by basing it on a one-time seed generated manually in a reliably random way. I might be wrong here, but as I understand it you need way more often random

Re: Trying to install version 2.1.4

2015-05-27 Thread Daniel Kahn Gillmor
On Sun 2015-05-24 06:58:21 -0400, Peter Lebbing wrote: It might also be that the package maintainers (hi dkg!) might soon put 2.1.4 into experimental themselves. So it really depends on how far you want to take this I need the latest and greatest. Sorry, i'm aware of this but terribly behind

Re: Random Seed for Generating PGP Keys

2015-05-27 Thread NIIBE Yutaka
Hello, On 05/27/2015 10:14 PM, George Lee wrote: I'm not trying to generate multiple random numbers, but just generate a PGP key one time in a way that is very hard to crack by basing it on a one-time seed generated manually in a reliably random way. I'd understand your point. I interpret it

Re: Trying to install version 2.1.4

2015-05-27 Thread Daniel Kahn Gillmor
On Wed 2015-05-27 22:40:44 -0400, Daniel Kahn Gillmor wrote: On Sun 2015-05-24 06:58:21 -0400, Peter Lebbing wrote: It might also be that the package maintainers (hi dkg!) might soon put 2.1.4 into experimental themselves. So it really depends on how far you want to take this I need the