IETF Logo Mail Archive

Re: [openpgp] Intent to deprecate: Insecure primitives

Derek Atkins <derek@ihtfp.com> Fri, 20 March 2015 16:15 UTC

Return-Path: <derek@ihtfp.com>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4AEA31A19E3 for <openpgp@ietfa.amsl.com>; Fri, 20 Mar 2015 09:15:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MnG6lux6RumL for <openpgp@ietfa.amsl.com>; Fri, 20 Mar 2015 09:15:20 -0700 (PDT)
Received: from mail2.ihtfp.org (mail2.ihtfp.org [IPv6:2001:4830:143:1::3a11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FB761ACD74 for <openpgp@ietf.org>; Fri, 20 Mar 2015 09:15:10 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 12531E2038; Fri, 20 Mar 2015 12:15:09 -0400 (EDT)
Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 26820-08; Fri, 20 Mar 2015 12:15:07 -0400 (EDT)
Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 7A2D7E2036; Fri, 20 Mar 2015 12:15:07 -0400 (EDT)
Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t2KGF6vJ029798; Fri, 20 Mar 2015 12:15:06 -0400
From: Derek Atkins <derek@ihtfp.com>
To: Bill Frantz <frantz@pwpconsult.com>
References: <r422Ps-1075i-0DAFD7F0DE904C66B37F279A05E0CB4A@Williams-MacBook-Pro.local>
Date: Fri, 20 Mar 2015 12:15:06 -0400
In-Reply-To: <r422Ps-1075i-0DAFD7F0DE904C66B37F279A05E0CB4A@Williams-MacBook-Pro.local> (Bill Frantz's message of "Wed, 18 Mar 2015 15:38:59 -0700")
Message-ID: <sjm8uerhchh.fsf@securerf.ihtfp.org>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Virus-Scanned: Maia Mailguard 1.0.2a
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/gsR4g4FZmlotF05zP5Ds2PVh2ks>
Cc: openpgp@ietf.org, Falcon Darkstar Momot <falcon@iridiumlinux.org>
Subject: Re: [openpgp] Intent to deprecate: Insecure primitives
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Mar 2015 16:15:21 -0000

Bill Frantz <frantz@pwpconsult.com> writes:

> The software works fine. The user has either lost the secret key file
> or has forgotten the passphrase. I don't know a technical solution,
> particularly to the 2nd problem. Any suggestions?

Nope, that's NOT the problem.  They keys all exist.  The passphrase is
known.  The problem is that software removed support for the
keys/algorithms in which the data is encrypted.  This is absolutely a
technical problem with the software and is completely solvable.

> Cheers - Bill

-derek

-- 
       Derek Atkins                 617-623-3745
       derek@ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant

v2.23.0 | Report a Bug | By Email