GnuPG BOF (was: Re: Security Devroom @ FOSDEM'15)

2015-01-18 Thread Kristian Fiskerstrand
es it difficult to work with systems such as Symantec Encryption Serve) - Standardization of the EdDSA I-D by WK (we already support this in the development branch of SKS, but not in any released version) - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapita

Re: Are there cases where gpg --verify will exit 0, even if verification failed?

2015-01-14 Thread Kristian Fiskerstrand
r the validity of the issuing key. - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3

Re: HKPS fails on GPG 2.1

2015-01-03 Thread Kristian Fiskerstrand
e ./configure output for more details. If you didn't compile it yourself, file a bug with whomever provided the binaries for inclusion of this feature similar to Arch Linux's [0] References: [0] https://bugs.archlinux.org/task/42739 - -- - Kristian Fiskers

Re: HKPS fails on GPG 2.1

2015-01-03 Thread Kristian Fiskerstrand
l and its libraries do not > come with gnupg2.1.1 for Windows installer as it does with GPG4win > installer, and I assume GPGTools for Mac. > Gnupg 2.1 does not use curl for these matters - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter

Re: GPG (v. 1.4.12) is not user-friendly

2015-01-01 Thread Kristian Fiskerstrand
7;t have to be done in the primary user keyring however, but you can easily use a temporary keyring - see "--keyring file" - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3ED

Re: Securing the future of GnuPG with BitCoin

2014-12-19 Thread Kristian Fiskerstrand
lland Stiftung account too. ": https://www.wauland.de/en/donation.html#61 offers bitcoin - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net

Re: Securing the future of GnuPG with BitCoin

2014-12-19 Thread Kristian Fiskerstrand
the project rather than a lump sum? References: [0] https://flattr.com/thing/1901175/GnuPG-donation [1] http://g10code.com/gnupg-donation.html - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP

Re: Mainkey with many subkeys??

2014-12-13 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 12/13/2014 02:41 PM, Peter Lebbing wrote: > -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > > On 08/12/14 16:37, Kristian Fiskerstrand wrote: >> This key will always be capable of signing by definition > > In what sense is

Re: gpg wants IDEA

2014-12-11 Thread Kristian Fiskerstrand
ox.fld\nge4mh01.bod: What does showpref on this key tell you about key preferences on that key and your own? If you include your own key as an encrypt-to and do not list IDEA in preferences for that it should find another common denominator (likely 3DES) - -- - -----

Re: Release scheduling

2014-12-10 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 12/10/2014 06:44 PM, Kristian Fiskerstrand wrote: > > ... > >> Individual keyserver should be no issue as long as you don't hit >> the SNI issue, are you sure gnupg is built with gnutls / hkps >> support? I k

Re: Release scheduling

2014-12-10 Thread Kristian Fiskerstrand
f it is linked with gnutls. > > > - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 - "Histor

Re: Release scheduling

2014-12-10 Thread Kristian Fiskerstrand
pipermail/gnupg-users/2014-November/051698.html > > On Wednesday, 2014-12-10 18:10:58 Kristian Fiskerstrand wrote: >> The SNI issue last discussed in [0] springs to mind. But I still >> experience this on gpg (GnuPG) 2.1.1-beta67 > > I had the impression that this bug is gett

Re: Release scheduling

2014-12-10 Thread Kristian Fiskerstrand
But I still experience this on gpg (GnuPG) 2.1.1-beta67 References: [0] http://lists.gnupg.org/pipermail/gnupg-users/2014-November/051471.html - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public

Re: Mainkey with many subkeys??

2014-12-08 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 12/08/2014 05:18 PM, MFPA wrote: > > > On Monday 8 December 2014 at 3:37:20 PM, in > , Kristian Fiskerstrand > wrote: > > >> Changing this would require a new self-signature limiting the use >> flags,

Re: Mainkey with many subkeys??

2014-12-08 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 12/08/2014 04:28 PM, gnupgpacker wrote: > Hello, > >> -Original Message- From: Kristian Fiskerstrand Sent: >> Monday, December 08, 2014 12:44 PM >> >>> Main key has options SC. There is an active newer s

Re: Mainkey with many subkeys??

2014-12-08 Thread Kristian Fiskerstrand
f cellphones and batteries these days at least means I'm switching phones once every two years or even more often. > mobile phones, which would indeed mean going to your other device > to decrypt. I think the assertion is that a key held on a mobile > phone is possibly less secure.

Re: Mainkey with many subkeys??

2014-12-08 Thread Kristian Fiskerstrand
r keyservers or >> to use more generally, but you are correct in that the >> information is retained. > - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-k

Re: Mainkey with many subkeys??

2014-12-07 Thread Kristian Fiskerstrand
ally, but you are correct in that the information is retained. - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net f

Re: Keysigning

2014-12-03 Thread Kristian Fiskerstrand
r the key to verify your signatures, It > failed with:- gpg: key 0x7D3A6C5A47CF3842: rejected by import > filter This one means you should update your version of gnupg. It was a bug back in 2.0.24 and 2.0.25 (and the 1.4 versions released around the same time). - -- - ----

Re: Keygrip v fingerprint ?

2014-11-29 Thread Kristian Fiskerstrand
=42c4b1f06faf1bbe71ffadc2fee0fad6bec91a97;hb=refs/heads/master - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 3

Re: Beta for 2.1.1 available

2014-11-25 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 11/25/2014 10:50 AM, Hugo Hinterberger wrote: > Hi Kristian, > > On Mon, 24 Nov 2014 21:40:22 +0100, Kristian Fiskerstrand > wrote: > >> For 2.1 you need the following in dirmngr.conf: hkp-cacert >> /path/

Re: Beta for 2.1.1 available

2014-11-24 Thread Kristian Fiskerstrand
s ca-cert-file="C:/Users//AppData/Roaming/gnupg/sks-keyservers.netCA.crt" - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fp

Re: Beta for 2.1.1 available

2014-11-24 Thread Kristian Fiskerstrand
... I'll make sure to push out an updated version to other gentoo users as well. Thanks! - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyserve

Re: Beta for 2.1.1 available

2014-11-24 Thread Kristian Fiskerstrand
g 1024 output log at: https://oc.sumptuouscapital.com/public.php?service=files&t=1d1b4f0b7b4c707c44cc388739ea5be9 - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at

Re: Beta for 2.1.1 available

2014-11-24 Thread Kristian Fiskerstrand
UT' failed: End of file 2014-11-24 10:52:40 dirmngr[29131.0] Assuan processing failed: Broken pipe libassuan version is 2.1.2. - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key

Re: Encryption on Mailing lists sensless?

2014-11-18 Thread Kristian Fiskerstrand
o > does everyone tapping your connections. We suggest that you limit > that risk to the sysadmin you already trust. > Any chance you can fix your client's handling of threading? You seem to start a new top post on every reply. - -- - ---- Kristian Fiskers

Re: GnuPG 2.1.0: --refresh-keys regression

2014-11-14 Thread Kristian Fiskerstrand
47C6CFA8AADFDCE 2014-11-14 13:59:26 dirmngr[5952.0] DBG: END Certificate 2014-11-14 13:59:26 dirmngr[5952.0] TLS connection authentication failed: General error 2014-11-14 13:59:26 dirmngr[5952.0] error connecting to 'https://alita.karotte.org:443': General error 2014-11-14 13:59:26 dirmngr

Re: ECDSA vs EDDSA

2014-11-10 Thread Kristian Fiskerstrand
FC6979] http://tools.ietf.org/rfc/rfc6979.txt - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5

Re: [Announce] GnuPG 2.1.0 "modern" released

2014-11-09 Thread Kristian Fiskerstrand
6637[1]. References: [0] http://www.ietf.org/id/draft-koch-eddsa-for-openpgp-01.txt [1] http://tools.ietf.org/rfc/rfc6637.txt - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFA

Re: gpg-agent forwarding

2014-11-06 Thread Kristian Fiskerstrand
t can > be invoked by using the command-line OpenSSH client? I can't find > it. > See https://lists.gnupg.org/pipermail/gnupg-devel/2014-August/028697.html - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk -

Re: Libcrypt examples?

2014-10-16 Thread Kristian fiskerstrand
Not really sure how good it is to get involved in this discussion, but, ... see answers inline Sent from my iPad > On 16 Oct 2014, at 19:21, "Ronald F. Guilmette" > wrote: > > > I'm sorry that I could not reply right away. I was called to other > duties. > > In message <8738aomjb1@vige

Re: Public Key Algorithms - GnuPG 2.x lists fewer than GnuPG 1.x

2014-08-28 Thread Kristian Fiskerstrand
and -E) $ gpg2 --version gpg (GnuPG) 2.0.26 libgcrypt 1.7.0-beta108 Pubkey: RSA, RSA, RSA, ELG, DSA $ gpg2.1 --version gpg (GnuPG) 2.1.0-beta794 libgcrypt 1.7.0-beta108 Pubkey: RSA, RSA, RSA, ELG, DSA, ECDH, ECDSA, EDDSA - -- - Kristian Fiskerstrand Bl

Re: (OT) installing gnupg-2.0.26

2014-08-25 Thread Kristian fiskerstrand
(no signature today, but shouldn't contain anything controversial) Sent from my iPad > On 25 Aug 2014, at 09:10, Werner Koch wrote: > > On Sun, 24 Aug 2014 19:22, pe...@digitalbrains.com said: > >> Doesn't sound very dumb to me; it's just a regular mistake even if you >> knew that directories

Re: default encrypt to multiple keys

2014-08-24 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 08/24/2014 11:08 PM, Olav Seyfarth wrote: > In gpg.conf I have set these two options default-key > 2C8E43DAEBB23B3E668AF459A197DF6B6AE1EF56 default-recipient-self Look into the encrypt-to option - -- - ---- Kr

Re: installing gnupg-2.0.26

2014-08-24 Thread Kristian Fiskerstrand
gt;= 1.11... no configure: error: > libgpg-error is needed. See > ftp://ftp.gnupg.org/gcrypt/libgpg-error/ . > .. 1.11 is required ? Download the latest version and try again - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @kr

Re: It's time for PGP to die.

2014-08-18 Thread Kristian Fiskerstrand
he protection doesn't extend beyond that? - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3

Re: AW: [Announce] The sixth Beta for GnuPG 2.1 is now available for testing

2014-08-18 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 08/18/2014 09:14 AM, KA IT User wrote: > Again, we request to remove us from the mailing list. See the list-unsubscribe header or the bottom of every mail for how to unsubscribe. - -- - ---- Kristian Fiskerstrand B

Re: keys.gnupg.net - Refresh all public keys never completes in Enigmail, some servers down?

2014-08-14 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 08/14/2014 06:13 PM, OmegaPhil wrote: > On 13/08/14 22:13, Kristian Fiskerstrand wrote: >> On 08/12/2014 09:21 PM, OmegaPhil wrote: >>> Please CC me in etc, I'm not subscribed to the list. >&g

Re: keys.gnupg.net - Refresh all public keys never completes in Enigmail, some servers down?

2014-08-13 Thread Kristian Fiskerstrand
a reliable way to check availability, the icmp protocol is often blocked by the firewall, you should do a HTTP get request. As for your issues, try using --keyserver hkp://p80.pool.sks-keyservers.net:80 to rule out any firewall blocking 11371 etc. - -- - ---- Kristian Fisk

Re: How to preserve the permission/owner/group owner on the pubring.gpg, secring.gpg and trustdb.gpg

2014-08-07 Thread Kristian Fiskerstrand
-alone CA or the primary key itself). - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 - Ad as

Re: one key/pair for multiple email accounts

2014-07-08 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 07/08/2014 11:15 AM, The Fuzzy Whirlpool Thunderstorm wrote: > On Tue, Jul 08, 2014 at 10:54:18AM +0200, Kristian Fiskerstrand > wrote: >> Wouldn't necessarily be to _hide_ anything either. I tend to use >> it as a role

Re: one key/pair for multiple email accounts

2014-07-08 Thread Kristian Fiskerstrand
is_ available). The primary reason for this is that I have that key located on the company computer which is under the control of the IT department, not me, so wouldn't want to use my own personal keys for that. - -- - Kristian Fiskerstrand Blog: http://blog.sum

Re: Greetings everybody, new user here

2014-07-08 Thread Kristian Fiskerstrand
iew of the network, have a look at the chart on [0] (if the IP change for that hasn't propagated yet, try [1] instead) References: [0] http://storage.sks-keyservers.net/2014-07-sks-network.png [1] http://sks.kfwebs.com/2014-07-sks-network.png - -- - ---- Kristian Fiskerst

Re: ECC and CMS (Re: [Announce] The fifth Beta for GnuPG 2.1 is now available for testing)

2014-07-08 Thread Kristian Fiskerstrand
ference* for OpenPGP myself (and to be honest there is enough to keep track of there :) ) - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr

Re: ECC and CMS (Re: [Announce] The fifth Beta for GnuPG 2.1 is now available for testing)

2014-07-07 Thread Kristian Fiskerstrand
://tools.ietf.org/html/rfc6637 [1] http://www.ietf.org/mail-archive/web/openpgp/current/msg07194.html - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:

Re: On the advisability of stronger digests than SHA-1 in OpenPGP certifications [was: Re: riseup.net OpenPGP Best Practices article]

2014-06-27 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/27/2014 10:24 PM, John Clizbe wrote: > Kristian Fiskerstrand wrote: >> On 06/27/2014 03:54 PM, shm...@riseup.net wrote: >> >> >>> Robert J. Hansen: >>>> On 6/26/2014 5:57 PM, Daniel Kahn Gillmor wro

Re: On the advisability of stronger digests than SHA-1 in OpenPGP certifications [was: Re: riseup.net OpenPGP Best Practices article]

2014-06-27 Thread Kristian Fiskerstrand
partment in a Law firm (or for that matter Financial world) about it. They want SLAs and support, and who knows what custom addons they have for their Outlook setup for various functions that makes it impractical to switch to Thunderbird (does it support Exchange these days?) - -- - --

Re: [Announce] [security fix] GnuPG 1.4.17 released

2014-06-23 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/23/2014 07:19 PM, Kristian Fiskerstrand wrote: > On 06/23/2014 06:21 PM, Werner Koch wrote: >> Hello! > > > Hi > > >> * Avoid DoS due to garbled compressed data packets. > > > Is this CVE-20

Re: [Announce] [security fix] GnuPG 1.4.17 released

2014-06-23 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/23/2014 06:21 PM, Werner Koch wrote: > Hello! > Hi > > * Avoid DoS due to garbled compressed data packets. Is this CVE-2013-4402 as fixed in 2.0.22 or a new bug? - -- - ---- Kristian Fiskerstran

Re: New user needs some help

2014-06-05 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/06/2014 12:24 AM, Kristian Fiskerstrand wrote: > On 06/06/2014 12:09 AM, Werner Koch wrote: >> On Thu, 5 Jun 2014 20:09, hol...@cox.net said: >>> On Thu, Jun 05, 2014 at 03:26:16AM -0400, Cpp wrote: >

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-05 Thread Kristian Fiskerstrand
gives gpg (GnuPG) 2.1.0-betabeta442 currently :) Anyways; If anyone using gentoo wants to try out 2.1, there is a live ebuild app-crypt/gnupg- in my overlay accessible through layman[mercurial] titled k_f. - -- - ---- Kristian Fiskerstrand Blog: http:

Re: New user needs some help

2014-06-05 Thread Kristian Fiskerstrand
uted out to there rest of the pool. References [0] https://sks-keyservers.net/status/info/keys.cmarstech.com - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD

Changes to sks-keyservers.net pools

2014-05-06 Thread Kristian Fiskerstrand
o the main pool at this point. References: [0] http://lists.nongnu.org/archive/html/sks-devel/2014-05/msg00026.html [1] http://www.openwall.com/lists/oss-security/2014/05/01/16 - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter

[Announcement] SKS 1.1.5 Released

2014-05-05 Thread Kristian Fiskerstrand
The SKS Team (Yaron, John, Kristian, Phil, and the other contributors) - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109

Re: Get expiration date by searching on keyservers

2014-04-30 Thread Kristian Fiskerstrand
n is performed on the servers. References: [0] https://bitbucket.org/skskeyserver/sks-keyserver/pull-request/12/fixes-for-machine-readable-indexes/diff - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk -

Re: pgp key servers cors support

2014-04-20 Thread Kristian Fiskerstrand
//lists.nongnu.org/archive/html/sks-devel/ [1] https://bitbucket.org/skskeyserver/sks-keyserver/commits/f6e4e88a049a3497cc17b0ad15530782d78bc59f?at=default [2] https://sks-keyservers.net/overview-of-pools.php#pool_subset - -- - Kristian F

Re: Length for AES256 symmetric encryption passphrase?

2014-04-03 Thread Kristian Fiskerstrand
mount of entropy provided by the passphrase. - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FA

Re: gpg 1.4.16 Windows - version info

2014-02-20 Thread Kristian Fiskerstrand
parate between 2.0 and 2.1 in some way (i.e. include minor as well). Although this isn't strictly speaking from a usability perspective (as the capabilities of a given user's implementation would be presented in the key preferences), it might have some value in tracking upgrade adop

Re: gpg 1.4.16 Windows - version info

2014-02-19 Thread Kristian Fiskerstrand
bout GnuPG is very short: > > Version: GnuPG v1 > > Bug or feature? > Feature. See announcement of 1.4.16 at [0] that describe "Put only the major version number by default into armored output." [0] http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000337.html - -- - -

Re: How to verify revocation?

2014-02-19 Thread Kristian Fiskerstrand
he server then it does a signature check. > That is a correct interpretation, indeed. - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-ke

Re: Safe curves in gnupg?

2014-02-18 Thread Kristian Fiskerstrand
pported in SKS 1.1.5 and can be used in the hkp://subset.pool.sks-keyservers.net (that will get a min requirement of 1.1.5 (latest version as usual)). We should be able to have this out in time for GnuPG 2.1. The NIST curves are supported as of SKS 1.1.4. - -- - ---- Kristian Fiskerstrand

Re: Moving away from SHA-1

2014-02-12 Thread Kristian Fiskerstrand
hat would be [0] References: [0] http://www.ietf.org/mail-archive/web/openpgp/current/maillist.html - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net

Re: BoF at FOSDEM ?

2014-02-01 Thread Kristian Fiskerstrand
I have signed up for a slot at H3.227 today (saturday) at 1300-1400 see you there

Re: BoF at FOSDEM ?

2014-02-01 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 [Seems my email from my cellphone got stuck in the moderator queue. So please excuse a duplicate post once it gets through. ] On 02/01/2014 10:25 AM, Kristian Fiskerstrand wrote: > I have signed up for a slot at H3.227 today (saturday) at >

OpenPGP key statistics

2014-01-29 Thread Kristian Fiskerstrand
o the current SKS tip in my mercurial queue at https://bitbucket.org/kristianf/sks-keyserver-patches/src/tip/SKSStats?at=default References: [0] http://blog.sumptuouscapital.com/2014/01/openpgp-key-statistics/ - -- - Kristian Fiskerstrand Blog:

Re: old pgp2.6x keys imported in gpg (compile pgp 2.6)

2014-01-28 Thread Kristian Fiskerstrand
/article/42/GnuPG-2.0---IDEA-support - -- - ---- Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 - -

Re: BoF at FOSDEM ?

2014-01-23 Thread Kristian Fiskerstrand
lot. Thus if there is interest in holding a BoF, > I would ask someone else to walk over to info desk at the > H-Building and sign up for a slot on Saturday afternoon or Sunday. I'll be arriving on friday evening, so I could do this on saturday morning. - -- - ----

Re: deleting secret key not implemented

2013-12-31 Thread Kristian Fiskerstrand
do it through gpg2? > Can I do it manually somehow? > Get the keygrip as gpg2.1 --with-keygrip -K uid and delete the corresponding file(s) in $GPGHOME/private-keys-v1.d. The form should be .key. - -- - ---- Kristian Fiskerstrand Blog: http://blo

Re: Is there a chance smartcards have a backdoor? (was Re: Any future for the Crypto Stick?)

2013-12-05 Thread Kristian Fiskerstrand
ttp://sites.miis.edu/cysec/2013/10/10/taiwans-citizen-smart-card-plan-compromised-by-bad-rngs/ - -- - Kristian Fiskerstrand Blog: http://blog.sumptuouscapital.com Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keys

Re: searching for keys

2013-07-14 Thread Kristian Fiskerstrand
.net/overview-of-pools.php [1] https://sks-keyservers.net/status/ [2] http://tools.ietf.org/id/draft-shaw-openpgp-hkp-00.txt - Kristian Fiskerstrand Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AF

Re: searching for keys

2013-07-14 Thread Kristian Fiskerstrand
a DNS Round Robin[0], so no request is being handled by the pool itself, and no redirection is happening to other servers. However, all the servers included in the HKPS pool needs to be validly certified by the pool CA. [0] http://en.wikipedia.org/wiki/Round-robin_DNS - -- - -

Re: determine encryption key without trying to decrypt

2013-05-02 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05/02/2013 11:41 PM, Hauke Laging wrote: > Hello, > > how can I determine the key(s) for which a file has been encrypted > without gpg trying to decrypt the file? Hi Hauke, Try --list-only - -- - -

Re: One Private Key for several users

2013-04-22 Thread Kristian Fiskerstrand
key is shared between the various parties. This could make key management easier as it allows for more frequent key-generation (when revoking someone's access) without losing out on the certificate history (signatures etc). - -- - ----

Re: [Sks-devel] pool.sks-keyservers.net issues

2013-03-05 Thread Kristian Fiskerstrand
identified a second server in the process that is currently excluded from the pool with status "HTTP/1.1 POST error (417)" [0] References: [0] http://sks-keyservers.net/status/info/sks.ecks.ca Thanks for the suggestion! - -- - ---- Kr

Re: Questions about OpenPGP best practices

2013-03-01 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 03/01/2013 06:06 PM, Kristian Fiskerstrand wrote: > On 03/01/2013 12:07 AM, Doug Barton wrote: .. > >> I hope you'll reconsider your decision. > > I certainly continuously consider constructive feedback on the > s

Re: Questions about OpenPGP best practices

2013-03-01 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 03/01/2013 12:07 AM, Doug Barton wrote: > On 02/28/2013 09:33 AM, Kristian Fiskerstrand wrote: | for a > service that specifically targets the OpenPGP community, I | > consider using the OpenPGP WoT more appropriate than any CA | >

Re: [Sks-devel] pool.sks-keyservers.net issues

2013-03-01 Thread Kristian Fiskerstrand
ver > where this fails. > This is a good idea. I'll add it to my TODO list. - -- - Kristian Fiskerstrand Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3

Re: Questions about OpenPGP best practices

2013-02-28 Thread Kristian Fiskerstrand
", to > give real users a clue, but they may be trying to be less visible > to 'bots. > See above, you're trying to talk to my webserver rather than any SKS server, this time on port 11371. - -- - Kristian Fiskerstrand Twitter: @krifisk - ---

Re: [Sks-devel] pool.sks-keyservers.net issues

2013-02-28 Thread Kristian Fiskerstrand
f you're talking to different servers. - -- - ---- Kristian Fiskerstrand Twitter: @krifisk - Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 - Aqui

Re: [Sks-devel] pool.sks-keyservers.net issues

2013-02-28 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/28/2013 07:01 PM, Doug Barton wrote: > On 02/28/2013 09:44 AM, Kristian Fiskerstrand wrote: | Hi Doug, | > ... > Yes, I'm talking to different servers (as would be expected). Just > tried it a few times ... > At le

Re: Questions about OpenPGP best practices

2013-02-26 Thread kristian . fiskerstrand
Hi, and sorry for top posting. I'm on the road again, so only blackberry access for now. I would indeed like to get more feedback on the pools. My first question is whether you notice the same behavior when using the geographical pools (eu,na,oc,sa) that are optimized based on the methods descr

Re: import trustdb.gpg or start from scratch?

2012-11-14 Thread Kristian Fiskerstrand
eed-file > I do indeed, thank you :) -- ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk "Great things are not accomplished by those who yield to trends and fads and popular opinion." (Jack Kerouac

Re: import trustdb.gpg or start from scratch?

2012-11-14 Thread Kristian Fiskerstrand
tem has a TRNG device and there isn't expected to be a block on such a request. -- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk Divide et impera Divide and govern This email was digitally signed using the OpenPG

Re: [ANN] Hockeypuck: OpenPGP Keyserver

2012-11-05 Thread Kristian Fiskerstrand
0B [2] https://sks-keyservers.net/status/ [3] http://key-server.org:11371/pks/lookup?op=stats -- ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk Potius sero quam numquam Better late then never --

Fwd: sks-keyservers.net: ECC safe subpool

2012-10-07 Thread Kristian Fiskerstrand
Forwarding this message originally sent to sks-devel as it can have relevance for gnupg-users as well. Original Message Subject: sks-keyservers.net: ECC safe subpool Date: Sun, 07 Oct 2012 22:59:54 +0200 From: Kristian Fiskerstrand To: sks-devel Hi, Following the release of

SRV records and HKPS requests

2012-10-06 Thread Kristian Fiskerstrand
2-10/msg2.html [2] http://apache-http-server.18135.n6.nabble.com/mod-gnutls-and-mod-proxy-TLS-termination-td4831028.html [3] http://lists.gnu.org/archive/html/sks-devel/2010-04/msg00016.html -- ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krif

NIST Selects Winner of Secure Hash Algorithm (SHA-3) Competition

2012-10-02 Thread Kristian Fiskerstrand
algorithm, might be threatened. Keccak will now become NIST’s SHA-3 hash algorithm. You can read more at http://www.nist.gov/public_affairs/tech-beat/tb20121002.cfm#sha Congratulations Keccak! -- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter

Re: encryption/decryption without files

2012-09-13 Thread Kristian Fiskerstrand
On 09/13/2012 06:22 PM, Kristian Fiskerstrand wrote: > On 09/13/2012 05:47 PM, ved...@nym.hush.com wrote: >> The discussion about 'safe' text editors brings about an >> interesting question: >> >> Is an editor needed at all? >> > > ... > &

Re: encryption/decryption without files

2012-09-13 Thread Kristian Fiskerstrand
d by Ctrl+D for unix-like systems or Ctrl+Z && (enter) for windows based shells. hth -- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk "Be a yardstick of quality. Some people aren&

Re: Elliptic Curve Cryptography

2012-08-13 Thread Kristian Fiskerstrand
rfc6637.txt [1] https://bitbucket.org/skskeyserver/sks-keyserver/pull-request/5/elliptic-curve-public-keys hth - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Qui audet vincit Who dares wins - --

Re: Elliptic Curve Cryptography

2012-08-13 Thread Kristian Fiskerstrand
g to S/MIME and not PGP/MIME ? - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Aut dosce, aut disce, aut discede Either teach, or study, or leave - This email was digitally signed using the OpenPGP standard. If you want

Re: Malformed Revokation Certificate?

2012-08-09 Thread Kristian Fiskerstrand
the public key using import, hence doesn't require a passphrase, the same way as A doesn't need B's passphrase when signing B's public key. hth -- ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk Pri

Re: Malformed Revokation Certificate?

2012-08-09 Thread Kristian Fiskerstrand
ps://bitbucket.org/kristianf/sks-keyserver-patches/src/f1f6b537921c/Error_on_standalone_revokation_certificate [1] http://keys2.kfwebs.net:11371 -- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk Nosce te ipsum!

Re: key search does not work with gpg2

2012-07-15 Thread Kristian Fiskerstrand
ecv-key ; gpg2 --keyserver 109.230.243.87 --recv-key B973BA7B (ii) Prefix the key id with 0x as gpg2 --keyserver 109.230.243.87 --search-key 0xB973BA7B -- ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk Corruptissima re

Re: How to "activate" gpg.conf entries?

2012-07-11 Thread Kristian Fiskerstrand
lly signing my messages, right? For clearsigned messages, yes, for a message sent to someone else while using their public key, it will depend on the capabilities specified in their preference. > and "default-preference-list" is only used for when user generates a >

Re: How to "activate" gpg.conf entries?

2012-07-11 Thread Kristian Fiskerstrand
ublic key you'd use "setpref", which can also be used to update in accordance with the default-preference-list you set in gpg.conf. Note that for others to see the changes they will need an updated copy of the public key (typically; re-send it to the keyservers). -- ---

Re: How to "activate" gpg.conf entries?

2012-07-11 Thread Kristian Fiskerstrand
, which are limited to the use of 160 bit hash algo. If you wish to use a non-truncated version of SHA256 and have such a key, you'll have to propagate to a new one. [0] http://tools.ietf.org/html/rfc4880 - -- - Kristian Fiskerstrand http://www.sumptuouscap

Re: GPG with GPUs

2012-06-17 Thread Kristian Fiskerstrand
are as follows: kristianf@ubuntu:~$ dd if=/dev/urandom bs=1024 count=200 > 200kfile kristianf@ubuntu:~$ time gpg2 -aser 43E67CF7 200kfile real0m2.321s user0m2.310s sys 0m0.000s where: kristianf@ubuntu:~$ gpg --list-key 43e67cf7 pub 15360R/43E67CF7 2006-12-15 uid

Re: GnuPG 2.1 Windows 7, pinentry does not allow paste, no way to bypass?

2012-06-03 Thread Kristian Fiskerstrand
onfig file as well (obviously changing the path to the appropriate directory), iirc pasting is disabled in the GUI varieties shipped in the main trunk, so these will require some patching to allow pasting of passwords (e.g. with password managers). An alternative could be to check out --passphrase-fd in ma

Re: system migration

2012-05-31 Thread Kristian Fiskerstrand
nger > have access to any Windows XP machines, so I can't -- but a little > exploration should reveal them. By default I'd expect this to be in %appdata%\gnupg (typing this into the explorer should give you the full location) - -- - Kristian F

<    1   2   3   4   >