IETF Logo Mail Archive

Re: Split Implementations of PGP

Werner Koch <wk@gnupg.org> Fri, 11 March 2005 18:47 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA25210 for <openpgp-archive@lists.ietf.org>; Fri, 11 Mar 2005 13:47:22 -0500 (EST)
Received: from above.proper.com (localhost.vpnc.org [127.0.0.1]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j2BIKW89015220; Fri, 11 Mar 2005 10:20:32 -0800 (PST) (envelope-from owner-ietf-openpgp@mail.imc.org)
Received: (from majordom@localhost) by above.proper.com (8.12.11/8.12.9/Submit) id j2BIKWfD015219; Fri, 11 Mar 2005 10:20:32 -0800 (PST)
X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f
Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j2BIKQRS015181 for <ietf-openpgp@imc.org>; Fri, 11 Mar 2005 10:20:31 -0800 (PST) (envelope-from wk@gnupg.org)
Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.34 #1 (Debian)) id 1D9odA-0004KR-Lq for <ietf-openpgp@imc.org>; Fri, 11 Mar 2005 19:13:00 +0100
Received: from wk by localhost with local (Exim 4.34 #1 (Debian)) id 1D9ogr-0001Gv-8J; Fri, 11 Mar 2005 19:16:49 +0100
To: Eric Burger <eburger@brooktrout.com>
Cc: ietf-openpgp@imc.org, "Glenn Parsons (E-mail)" <gparsons@nortelnetworks.com>
Subject: Re: Split Implementations of PGP
References: <EDD694D47377D7119C8400D0B77FD33101125D39@nhmail2.brooktrout.com>
From: Werner Koch <wk@gnupg.org>
Organisation: g10 Code GmbH
OpenPGP: id=5B0358A2; url=finger:wk@g10code.com
Date: Fri, 11 Mar 2005 19:16:49 +0100
In-Reply-To: <EDD694D47377D7119C8400D0B77FD33101125D39@nhmail2.brooktrout.com> (Eric Burger's message of "Fri, 11 Mar 2005 12:04:59 -0500")
Message-ID: <87wtsedp4e.fsf@wheatstone.g10code.de>
User-Agent: Gnus/5.1007 (Gnus v5.10.7) Emacs/21.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Fri, 11 Mar 2005 12:04:59 -0500, Eric Burger said:

> So, the question is, are there implementations of PGP where one can:
> 1. Extract the encrypted session key from the PGP-encrypted object
> 2. An API for handing over the encrypted session key and the client key,
> returning the clear session key (this would run on the remote client).
> 3. An API that takes the clear session key and the PGP-encrypted object and
> returns the cleartext object.

GnuPG provides this for many years.

    SESSION_KEY  <algo>:<hexdigits>
	The session key used to decrypt the message.  This message will
	only be emitted when the special option --show-session-key
	is used.  The format is suitable to be passed to the option
	--override-session-key

Use it together with --status-fd n.


Shalom-Salam,

   Werner

v2.23.0 | Report a Bug | By Email