Re: KeePass or any other password wallet to store and transport keys

2012-07-23 Thread Johan Wevers
On 23-07-2012 3:16, Robert J. Hansen wrote: Far more likely is a situation where you just don't meet your goals. For instance, if you encrypt data once with a DES key and then encrypt it again with a different DES key, you might think this would be 'two layers' of crypto. In reality, there

Re: KeePass or any other password wallet to store and transport keys

2012-07-23 Thread Robert J. Hansen
On 7/23/2012 3:19 AM, Johan Wevers wrote: That would be true if DES was a group, which it is not. That's why 3DES is more secure than single DES. D'oh. I don't know offhand which cipher I was thinking of (it's 3:30am and I'm about to hit the sack), but you're right, clearly I could not be

Re: GPG key to authenticate to SSH?

2012-07-23 Thread Werner Koch
On Sun, 22 Jul 2012 21:52, jer...@budts.be said: --enable-ssh-support option and the gpgkey2ssh script. You don't need gpgkey2ssh - it is a relict form the early days. gpg-agent supports the ssh-agent protocol for 7 years now. Is it somehow possible to 'automatically' use my GPG subkey for

Re: KeePass or any other password wallet to store and transport keys

2012-07-23 Thread antispam06
On Sun, Jul 22, 2012, at 21:16, Robert J. Hansen wrote: The real concern here isn't making the overall system weaker: it's fooling yourself into thinking you've made the system stronger, when in reality you probably haven't. I don't want to make it really stronger. Just less usable for the

Re: KeePass or any other password wallet to store and transport keys

2012-07-23 Thread Peter Lebbing
A different method I'd like to throw in for consideration is using a very strong random password generated by KeePass as the password to unlock your OpenPGP private key. A password with a lot of randomness is comparable to a symmetric encryption key when fed to GnuPG. GnuPG will still throw in

Re: GPA and Windows

2012-07-23 Thread Peter Lebbing
On 21/07/12 18:34, MFPA wrote: Iff is a widely used and recognised shorthand which means if and only if. Widely used and recognised, but possibly only in certain professions. Wikipedia, for example, lists it under mathematical jargon. Computer scientists will know it as well. But it might not

Re: KeePass or any other password wallet to store and transport keys

2012-07-23 Thread antispam06
On Mon, Jul 23, 2012, at 16:25, Peter Lebbing wrote: A different method I'd like to throw in for consideration is using a very strong random password generated by KeePass as the password to unlock your OpenPGP private key. Yes, that sounds a lot better than what I had in mind. It's also a