small security glitches

2011-11-01 Thread John A. Wallace
Hello. I was reading this page, http://www.gnupg.org/faq/GnuPG-FAQ.html#cant-we-have-a-gpg-library , and I found this comment near the end of it in the section entitled "How does this whole thing work?": "There is a small security glitch in the OpenPGP (and therefore GnuPG) system; to avoid this

GnuPG decryption problem

2011-11-01 Thread m . aflakparast
I need to decrypt .gz.gpg files (e.g. 70195_C1_WTCCCT442627.CEL.gz.gpg). I have the encryption key(passphrase). I used Gnp4win and ran into this error: "bad session key" Then I downloaded gnupg-1.4.9 for windows from the following link: http://techgenie.com/latest/how-to-install-gnupg-1-4-9-

Re: GnuPG decryption problem

2011-11-01 Thread David Smith
m.aflakpar...@ut.ac.ir wrote: > I need to decrypt .gz.gpg files (e.g. 70195_C1_WTCCCT442627.CEL.gz.gpg). > I have the encryption key(passphrase). Remember that the passphrase is not the key. The key is stored in a file, and that file is protected by the passphrase so that only people who know the

How can I know all the recipients of a GPG encrypted message

2011-11-01 Thread vivarto
Someone may encrypt the message to me and to 10 other recipients, I would like to know who they are. Is there a command line option for displaying all recipients to whom the message was encrypted. Thank you in advance for your help. Vivarto -- View this message in context: http://old.nabble.com

Re: small security glitches

2011-11-01 Thread Aaron Toponce
On Tue, Nov 01, 2011 at 02:04:31AM -0500, John A. Wallace wrote: > Hello. I was reading this page, > http://www.gnupg.org/faq/GnuPG-FAQ.html#cant-we-have-a-gpg-library , and I > found this comment near the end of it in the section entitled "How does this > whole thing work?": "There is a small se

Re: How to get the list of all keys to which the file has been encrypded

2011-11-01 Thread Peter Lebbing
On 01/11/11 01:44, Hauke Laging wrote: > But I don't know whether key servers allow the search for subkeys. $ gpg --search-keys DE6CDCA1 gpg: searching for "DE6CDCA1" from hkp server pool.sks-keyservers.net (1) Peter Lebbing 2048 bit RSA key DE500B3E, created: 2009-11-12 Yup, searc

Re: small security glitches

2011-11-01 Thread Hauke Laging
Am Dienstag, 1. November 2011, 13:35:11 schrieb Aaron Toponce: > Now switch sides. Suppose you're sending an encrypted mail to a collegue. > You're encrypting it for his eyes only. If you don't sign the message, he > may or may not choose to decrypt it. If you sign the encrypted mail, then > he ca

Re: GnuPG decryption problem

2011-11-01 Thread Chris Poole
On Mon, Oct 31, 2011 at 8:08 PM, wrote: > I am asked a passphrase, but the problem is that it is not possible to > write any thing in fron of the statement" Enter Passphrase:", e.i. > whatever you type, nothing appears on the screen! I have not used the gpg.exe you are talking about, but presuma

Re: small security glitches

2011-11-01 Thread Peter Lebbing
On 01/11/11 13:35, Aaron Toponce wrote: > The "glitch" is that for security AND trust, messages must be both > encrypted and signed. In that case, I find it to be phrased very awkwardly. Encryption provides encryption: people can't see what is in it. Period. Signing provides a form of integrity:

Re: small security glitches

2011-11-01 Thread gnupg
On 01/11/11 12:44, Hauke Laging wrote: >> Now switch sides. Suppose you're sending an encrypted mail to a collegue. >> You're encrypting it for his eyes only. If you don't sign the message, he >> may or may not choose to decrypt it. If you sign the encrypted mail, then >> he can verify the signatu

Re: GnuPG decryption problem

2011-11-01 Thread David Smith
Please remember to keep the GnuPG users' mailing list in copy in case anyone else has any better ideas. m.aflakpar...@ut.ac.ir wrote: > Thank you Dave, > > I tried again with this command: > > gpg --decrypt-file "myfile.gpg" > > and entered the passphrase when I was asekd to enter it. > But, th

Re: GnuPG decryption problem

2011-11-01 Thread Chris Poole
Have you confirmed that the passphrase you have is correct, and it's entered correctly? I would make sure this is the issue, by checking that gpg itself works as expected. 1. Open Notepad, write something in it. It doesn't matter what. Save the file as test.txt or similar. 2. Use gpg to encrypt

Re: GnuPG decryption problem

2011-11-01 Thread Peter Lebbing
> m.aflakpar...@ut.ac.ir wrote: >> Thank you Dave, >> >> I tried again with this command: >> >> gpg --decrypt-file "myfile.gpg" >> >> and entered the passphrase when I was asekd to enter it. >> But, this error comes up: >> >> gpg: encrypted with 1 passphrase >> gpg: decryption error: bad key! > >

Re: How can I know all the recipients of a GPG encrypted message

2011-11-01 Thread Jameson Graef Rollins
On Mon, 31 Oct 2011 13:04:21 -0700 (PDT), vivarto wrote: > Someone may encrypt the message to me and to 10 other recipients, I would > like to know who they are. How do you know it was encrypted to 10 other people? > Is there a command line option for displaying all recipients to whom the > mess

Re: How can I know all the recipients of a GPG encrypted message

2011-11-01 Thread Daniel Kahn Gillmor
On 10/31/2011 04:04 PM, vivarto wrote: > Is there a command line option for displaying all recipients to whom the > message was encrypted. feed the message body (not decrypted) itself through gpg --list-packets. You should see output like this: dkg@pip:~$ gpg --list-packets 2>/dev/null < .mail/m

Re: small security glitches

2011-11-01 Thread Doug Barton
On 11/01/2011 05:52, gn...@lists.grepular.com wrote: > Thunderbird + Enigmail here automatically decrypts encrypted email when > you view it, regardless of whether or not it is signed. That's a local preference, which you can easily disable. -- Nothin' ever doesn't change, but nothin'

gpg option "--list-only"

2011-11-01 Thread John A. Wallace
Hello. The online manual for gpg states this about the "-list-keys" option: "Changes the behaviour of some commands. This is like --dry-run but different in some cases. The semantic of this command may be extended in the future. Currently it only skips the actual decryption pass and therefore ena

batch decryption key Identification

2011-11-01 Thread John A. Wallace
> > Message: 7 > Date: Mon, 31 Oct 2011 21:20:24 -0500 > From: "John A. Wallace" > To: > Subject: batch decryption key identification > Message-ID: <01cc983c$d0fccd30$72f66790$@net> > Content-Type: text/plain; charset=us-ascii > > Hello. On this website > (http://www.gnupg.org/faq/GnuPG-FA