Re: Gnugpg

Old Rocker a écrit :
On Monday 30 Jan 2006 20:28, Phillip Susi wrote: 
I prefer to use the standard s/mime format for email signing and
encrypting with x.509 digital certificates.  Gpg seems kludgey to me.
Maybe a bit OT, but S/MIME (which I wouldn't call standard....) is much less secure than the algorithms used in GPG and can be broken relatively easily. However, for most purposes its adequate providing you haven't got sensitive stuff being encrypted.

Probably an exaggeration, but don't forget the US Secret Service once said that if all the personal computers in the world were set to crack one PGP encrypted message, it would taken ten times the age of the universe to crack it. The algorithms used in later versions of PGP and now GPG are much more secure, and I'd rather use just one system for my encryption and signing that works.

However, the OP was asking about GPGME, which is a library that allows the integration of GPG into a package that doesn't yet support it.
For those who want to start easy with Gnu Privacy Gard (Gnu/PG) the mail -client mozilla-thunderbird offers an mozilla-thunderbird-enigmail version. The needed packages are mozilla-thunderbird-enigmail, gnupg (the python-gnupginterface may come along with it as well).
Ubuntu brings specifically mozilla-thunderbird-enigmail as a all in one, whereas to get something correct as far as version numbers in Mandrake last year, I had to compile them from source for one, as a binary for the other, and put enigmail as an extension of Thunderbird.

What's cool is the Enigmail menu from which makes it possible to administrate the whole key-story in an intuitive enough way.
The trick is to create on key with the longest algorithm available,
(4096 bytes actually) and to create at same time a revocation certificate, to keep in a 'safe' place, particularly if you make your key so it does not expire, plus put it on a key server.
Then mime or not mime depends upon what the poeple you write to use on their side. MIME is the one most used.
Greetings, Joyce Markoll.


Attachment: signature.asc
Description: OpenPGP digital signature

--
ubuntu-users mailing list
ubuntu-users@xxxxxxxxxxxxxxxx
https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

Relevant Pages

  • Re: Nice GUI/CLI Password Manager for Linux
    ... vim can be configured to automatically use gpg to decrypt *.gpg files ... never touches the disk (though encrypting your swap partition too wouldn't ... autocmd BufReadPre,FileReadPre *.gpg set noswapfile ... " Switch to binary mode to read the encrypted file ...
    (Debian-User)
  • Re: Any backup solutions that offer password protected tapes?
    ... >> backing up to disk then encrypting the data using something like GPG ... > - This is a custom backup system outside the normal and usual tools any ... etc.) to encrypt the output to tape and decrypt the input from ...
    (comp.unix.solaris)
  • Re: Any backup solutions that offer password protected tapes?
    ... > backing up to disk then encrypting the data using something like GPG on ... I have the key backed-up on a pen drive and a remote system both gpg ... look at aespipe which comes with loop-aes specifically the script: ...
    (comp.unix.solaris)
  • Re: RSACryptoServiceProvider questions
    ... Remember that RSA is generally used for encrypting small amounts of data ... > OAEP padding, or is it sufficient to do this on the last ... >>leads, in practical situations, to a number of security ... >>assembly of one or more algorithms into an implementable ...
    (microsoft.public.dotnet.security)
  • Java interacting with gpg
    ... I'm starting a bit for our project where a client will be encrypting a small ... bit of text with a public key using GPG, and we need to decrypt it. ... I can simply fork off a gpg program everytime, ...
    (comp.lang.java.programmer)