Factbites
 Where results make sense
About us   |   Why use us?   |   Reviews   |   PR   |   Contact us  

Topic: OpenPGP


Related Topics
NYC

In the News (Tue 8 Dec 09)

  
  Pretty Good Privacy - Wikipedia, the free encyclopedia
OpenPGP is now an open standard used by PGP, GNU Privacy Guard (GnuPG), Hushmail, Veridis, Authora, and others.
OpenPGP is still under active development and a follow-on to RFC 2440 is being actively finalized by the OpenPGP working group as of mid-2004.
The OpenPGP standard specified mechanisms for negotiating agreement between the copies of PGP running at either end of a communications link as to which cipher algorithm is to be used with this or that message, as well as other feature additions after PGP 2.x.
en.wikipedia.org /wiki/OpenPGP   (4486 words)

  
 RFC 2440 (rfc2440) - OpenPGP Message Format
OpenPGP's Radix-64 encoding is composed of two parts: a base64 encoding of the binary data, and a checksum.
OpenPGP informs the user what kind of data is encoded in the ASCII armor through the use of the headers.
OpenPGP CFB mode uses an initialization vector (IV) of all zeros, and prefixes the plaintext with ten octets of random data, such that octets 9 and 10 match octets 7 and 8.
www.faqs.org /rfcs/rfc2440.html   (15932 words)

  
 RFC 2440 - OpenPGP Message Format. J. Callas, L. Donnerhacke, H. Finney, R. Thayer.
RFC 2440 OpenPGP Message Format November 1998 After the hashing is done the data is unloaded from the hash context(s) as with the other S2K algorithms.
RFC 2440 OpenPGP Message Format November 1998 message to be encrypted to a number of public keys, and also to one or more pass phrases.
RFC 2440 OpenPGP Message Format November 1998 A V4 fingerprint is the 160-bit SHA-1 hash of the one-octet Packet Tag, followed by the two-octet packet length, followed by the entire Public Key packet starting with the version field.
rfc.sunsite.dk /rfc/rfc2440.html   (16603 words)

  
 OpenPGP.org - The OpenPGP Alliance Home Page
OpenPGP is the most widely used email encryption standard in the world.
The OpenPGP standard was originally derived from PGP (Pretty Good Privacy), first created by Phil Zimmermann in 1991.
The OpenPGP Alliance is a growing group of companies and other organizations that are implementers of the OpenPGP Proposed Standard.
www.openpgp.org   (82 words)

  
 Zvon - RFC 2440 [OpenPGP Message Format] - General functions
In addition, OpenPGP provides key management and certificate services, but many of these are beyond the scope of this document.
OpenPGP's underlying native representation for encrypted messages, signature certificates, and keys is a stream of arbitrary octets.
OpenPGP is designed for applications that use both encryption and signatures, but there are a number of problems that are solved by a signature-only implementation.
www.zvon.org /tmRFC/RFC2440/Output/chapter2.html   (609 words)

  
 RFC 3156 (rfc3156) - MIME Security with OpenPGP
OpenPGP encrypted data Before OpenPGP encryption, the data is written in MIME canonical format (body and headers).
OpenPGP encrypted data is denoted by the "multipart/encrypted" content type, described in [2], and MUST have a "protocol" parameter value of "application/pgp-encrypted".
OpenPGP signed data OpenPGP signed messages are denoted by the "multipart/signed" content type, described in [2], with a "protocol" parameter which MUST have a value of "application/pgp-signature" (MUST be quoted).
www.faqs.org /rfcs/rfc3156.html   (2571 words)

  
 PGP Corporation - Library - CTO Corner - OpenPGP Flaw
They have been kind enough to give the OpenPGP community advance notice of their paper, and it is thus the subject of this CTO Corner article, which I'm writing in cooperation with David Shaw of Gnu Privacy Guard (GnuPG), Brian Smith of Hush Communications, Derek Atkins of the OpenPGP Working Group, and Phil Zimmermann.
However, in the case of an OpenPGP message that is encrypted using a public key (which then has symmetric data), there's no need to do the quick check because the symmetric key comes from a public key encryption.
OpenPGP encrypts the bulk of the message with a symmetric key and then encrypts that symmetric key with a public key.
www.pgp.com /library/ctocorner/openpgp.html   (1956 words)

  
 RFC2440   (Site not responding. Last check: 2007-10-07)
OpenPGP provides data integrity services for messages and data files by using these core technologies: - digital signatures - encryption - compression - radix-64 conversion In addition, OpenPGP provides key management and certificate services, but many of these are beyond the scope of this document.
OpenPGP packets are assembled into sequences in order to create messages and to transfer keys.
Some OpenPGP applications use so-called "detached signatures." For example, a program bundle may contain a file, and with it a second file that is a detached signature of the first file.
rfc.net /rfc2440.html   (15789 words)

  
 NewsForge | Securing Thunderbird email with OpenPGP
Email is commonly used in business today, yet only a small percentage of users take the time to guarantee their email is sent in a secure and confidential manner.
OpenPGP is a patent-free encryption scheme based on the same security architecture as the commercial version of PGP, which has been available since the early 90's.
Since being able to correlate signed messages with public OpenPGP keys is part of receiving secure messages, Enigmail also offers the possibility to import all the public keys of your contacts.
software.newsforge.com /software/05/01/06/1557216.shtml?tid=78&tid=132   (1679 words)

  
 OpenPGP.org - About OpenPGP
OpenPGP is a non-proprietary protocol for encrypting email using public key cryptography.
Beginning in 1997, the OpenPGP Working Group was formed in the Internet Engineering Task Force (IETF) to define this standard that had formerly been a proprietary product since 1991.
The OpenPGP Alliance brings companies together to pursue a common goal of promoting the same standard for email encryption and to apply the PKI that has emerged from the OpenPGP community to other non-email applications.
www.openpgp.org /about_openpgp   (220 words)

  
 OpenPGP functions - GNU TLS 1.2.8
The following functions are to be used for OpenPGP certificate handling.
This funtion is used to load OpenPGP keys into the GnuTLS credentials structure.
It doesn't matter whether the keys are armored or but, but the files should only contain one key which should not be encrypted.
www.gnu.org /software/gnutls/manual/html_node/OpenPGP-functions.html   (1295 words)

  
 [No title]
Standards Track [Page 10] RFC 2440 OpenPGP Message Format November 1998 After the hashing is done the data is unloaded from the hash context(s) as with the other S2K algorithms.
Standards Track [Page 32] RFC 2440 OpenPGP Message Format November 1998 message to be encrypted to a number of public keys, and also to one or more pass phrases.
Standards Track [Page 53] RFC 2440 OpenPGP Message Format November 1998 A V4 fingerprint is the 160-bit SHA-1 hash of the one-octet Packet Tag, followed by the two-octet packet length, followed by the entire Public Key packet starting with the version field.
www.ietf.org /rfc/rfc2440.txt   (11344 words)

  
 gnutls
OpenPGP keys also contain public parameters of a public key algorithm, and signatures from several other parties.
Certificate verification is possible by loading the trusted authorities into the credentials structure by using gnutls_certificate_set_x509_trust_file or gnutls_certificate_set_openpgp_keyring_file for openpgp keys.
Note however that the peer's certificate is not automatically verified, you should call gnutls_certificate_verify_peers, after a successful handshake, to verify the signatures of the certificate.
www.gnu.org /software/gnutls/manual/gnutls/gnutls.html   (7999 words)

  
 US-CERT Vulnerability Note VU#303094
A vulnerability in OpenPGP may allow attackers to recover partial plaintexts from OpenPGP messages that use symmetric encryption.
A vulnerability in OpenPGP can be used by attackers to recover partial plaintexts from messages employing symmetric encryption.
Attackers may be able to recover partial plaintexts from OpenPGP messages that use symmetric encryption.
www.kb.cert.org /vuls/id/303094   (488 words)

  
 ISS X-Force Database: openpgp-information-disclosure(19312): OpenPGP CFB mode information disclosure   (Site not responding. Last check: 2007-10-07)
OpenPGP is an open-source security format that uses public/private keys to encrypt, sign, and decrypt messages.
OpenPGP could allow a remote attacker to obtain sensitive information, caused by a vulnerability in the integrity ad-hoc feature.
SecurityTracker Alert ID: 1013166, OpenPGP CFB Mode Is Subject to Adaptive Chosen-Plaintext Attacks at http://www.securitytracker.com/alerts/2005/Feb/1013166.html.
xforce.iss.net /xforce/xfdb/19312   (325 words)

  
 GNU TLS Library - GNU Project - Free Software Foundation (FSF)
OpenPGP keys are similar to X.509 certificates, in the sense that hold public key parameters.
A reason could be that Bob is lazy enough, and signs other people's keys without being sure that they belong to the actual owner.
Especially in distributed environments where the concept of authorities is not clear, the use of the Openpgp trust model has obvious advantages.
www.gnu.org /software/gnutls/openpgp.html   (732 words)

  
 OpenPGP Message Format
The OpenPGP key ID of the key issuing the signature.
As stated in the introduction, OpenPGP's underlying native representation for objects is a stream of arbitrary octets, and some systems desire these objects to be immune to damage caused by character set translation, data conversions, etc.
An OpenPGP message is a packet or sequence of packets that corresponds to the following grammatical rules (comma represents sequential composition, and vertical bar separates alternatives):
xml.resource.org /public/rfc/html/rfc2440.html   (15032 words)

  
 S/MIME And OpenPGP Vie For Security Title
You'll have to choose between the two: S/MIME and OpenPGP can't work together, so if you want to send a digitally signed and encrypted message to your business partner, both of you have to be using the same secure mail protocol.
OpenPGP and its earlier iterations, meanwhile, haven't garnered equal high-profile acceptance among vendors.
Nowadays, OpenPGP and S/MIME are no longer so different technology-wise, which is why some IETF members question the need for parallel protocol efforts for secure e-mail.
www.nwc.com /904/904btb.html   (1335 words)

  
 [Announce] Attack against OpenPGP encryption
To be specific, unless you have your OpenPGP program set up as part of an automated system to accept encrypted messages, decrypt them, and then provide a response to the submitter, then this does not affect you at all.
This is why it is completely ineffective against human beings, who will presumably wonder why a stranger wants them to decrypt thousands and thousands of messages that won't decrypt, and then tell them what errors were seen.
These patches disable a portion of the OpenPGP protocol that the attack is exploiting.
lists.gnupg.org /pipermail/gnupg-announce/2005q1/000191.html   (316 words)

  
 Why I use OpenPGP   (Site not responding. Last check: 2007-10-07)
But perhaps I start by explaining what OpenPGP is. Or if you prefer, you may skip the lecture and grap my key right away.
OpenPGP is a way to use public-key cryptography to sign and encrypt email.
If you are having touble with my email because of such programs, My first advise will be to look at some other mail programs, since there might be other poorly written parts of whatever you are using now.
dossen.dk /~dossen/openpgp   (564 words)

  
 SecurityTracker.com Archives - OpenPGP CFB Mode Is Subject to Adaptive Chosen-Plaintext Attacks
A particular variation of cipher feedback (CFB) used by OpenPGP is affected.
The 'quick check' feature when OpenPGP encrypts bulk data may leak some data that can be used in the attack.
In particular it exploits > an ad-hoc integrity check feature in OpenPGP which was meant as a "quick check" to > determine the correctness of the decrypting symmetric key.
www.securitytracker.com /alerts/2005/Feb/1013166.html   (374 words)

  
 OpenPGP Alliance omits PGP Security | The Register
The OpenPGP Alliance, which was founded by PGP creator Phil Zimmermann, doesn't include Network Associates, whose PGP Security division owns the source code and trademark for the popular PGP encryption package first developed by Zimmermann in 1991.
OpenPGP, a non-proprietary protocol for encrypting email using public key cryptography based on the PGP program, was submitted to the Internet Engineering Task Force (IETF) in 1997.
Interoperability between different encryption packages is an important issue and so formation of the OpenPGP Alliance is welcome but the lack of involvement of Network Associates could be a stumbling block in the future.
www.theregister.co.uk /2001/05/30/openpgp_alliance_omits_pgp_security   (319 words)

  
 OpenPGP Alliance secures email - The Community's Center for Security
OpenPGP is a widely used email encryption system based on an Internet Engineering Task Force.
OpenPGP is a widely used email encryption system based on an Internet Engineering Task Force (IETF) standard, and any company can use it without paying licence fees.
The OpenPGP Alliance, made up of 11 security companies including Biodata, Hush and Qualcomm, will oversee testing to ensure encryption systems are interoperable, and will work towards extending the OpenPGP standard to other non-email applications that could benefit from privacy protection.
www.linuxsecurity.com /content/view/109991/0   (323 words)

  
 Python Cheese Shop : OpenPGP 0.2.3
This is an attempt at implementing OpenPGP in Python.
The primary focus is on flexibility with respect to packet information and message composition.
OpenPGP digital notary signature encryption PGP GnuPG gpg pgp openpgp crypto
www.python.org /pypi/OpenPGP/0.2.3   (109 words)

  
 OpenPKG: OpenPGP Key Server   (Site not responding. Last check: 2007-10-07)
Hence it is important that OpenPKG users are familiar with OpenPGP and Pretty Good Privacy (PGP) in general and with GNU Privacy Guard in particular.
This site is both a small OpenPGP Public Key server for the OpenPKG community and a reference collection of the essentials about GnuPG and OpenPGP.
The official OpenPGP public key of the OpenPKG project is "OpenPKG " (PGP Key Id 63C4CB9F) and can be found under the official URL http://www.openpkg.org/openpkg.pgp and on this OpenPGP server (or just press "Search!" in the form on the right side).
pgp.openpkg.org   (138 words)

  
 JEP-0027: Current Jabber OpenPGP Usage
This JEP documents the OpenPGP solution as it is used today, so that others may interoperate with clients that support it.
All operations described here are done with standard OpenPGP software such as GnuPG.
All keys are exchanged using OpenPGP key servers, and usually are retrieved when a signed stanza is received (key retrieval does not happen in-band).
www.jabber.org /jeps/jep-0027.html   (1110 words)

  
 S/MIME and OpenPGP
The charter for the OpenPGP WG states clearly that the purpose of the group is to create protocols based on PGP that can become IETF standards.
The OpenPGP protocol, which is on the IETF standards track, is described in OpenPGP Message Format, RFC 2440, which is being revised by draft-ietf-openpgp-rfc2440bis.
The MIME wrapping for OpenPGP is described in MIME Security with Pretty Good Privacy, RFC 3156.
www.imc.org /smime-pgpmime.html   (997 words)

  
 : FileAssurity OpenPGP, review at WorldSSP.net   (Site not responding. Last check: 2007-10-07)
FileAssurity OpenPGP Low cost, simple to use alternative to PGP FileAssurity OpenPGP provides the strong protection of PGP yet is much easier to use, costs a third of the price and comes with free support !
FileAssurity OpenPGP has the same easy to use interface as FileAssurity but also supports the encryption/signing, decryption/verification of PGP protected files...
FileAssurity OpenPGP Offers high-level protection at lower cost to PGP – just £30Date posted in ITsecurity.com: 6 August, 2003 6 August 2003: ArticSoft has announced its latest software to secure files, folders, documents and email attachments that also offers a low-cost, easy-to-use alternative to PGP protection products.
www.worldssp.net /webinfo.asp?proid=8927   (523 words)

  
 Cryptix OpenPGP
Cryptix OpenPGP is a Java implementation of the OpenPGP standard as defined in RFC 2440 and its predecessor RFC 1991.
Instead its intended audience are developers who want to add PGP encryption or signatures to their application.
Cryptix OpenPGP does not work on JDK 1.1 because it uses part of the Collection framework that was added to JDK 1.2, and Cryptix OpenPGP does not work on JDK 1.4, because Cryptix JCE (woll get to this soon) does not work on JDK 1.4 yet.
www.osix.net /modules/article?id=305   (1036 words)

  
 Archive of ietf-openpgp, by date
Re: "The OpenPGP mail and news header" extenssion, Ian G, Applicability of signed messages as proof of sending, Ian G, Re: "The OpenPGP mail and news header" extenssion, David Srbecky, 08/11/2005
OpenPGP header (was: Re: Meet in Paris?), Simon Josefsson, 08/03/2005
Re: OpenPGP Agenda for IETF-62, Ben Laurie, 02/28/2005
www.imc.org /ietf-openpgp/mail-archive/maillist.html   (2758 words)

  
 [No title]
Standards Track [Page 2] RFC 3156 MIME Security with OpenPGP August 2001 Note: If any line begins with the string "From ", it is strongly suggested that either the Quoted-Printable or Base64 MIME encoding be applied.
Standards Track [Page 4] RFC 3156 MIME Security with OpenPGP August 2001 Note: Implementations can either generate "signatures of a canonical text document" or "signatures of a binary document", as defined in [1].
Standards Track [Page 6] RFC 3156 MIME Security with OpenPGP August 2001 (2) Pass both the signed data and its associated content headers along with the OpenPGP signature to the signature verification service.
www.rfc-editor.org /rfc/rfc3156.txt   (2695 words)

Try your search on: Qwika (all wikis)

Factbites
  About us   |   Why use us?   |   Reviews   |   Press   |   Contact us  
Copyright © 2005-2007 www.factbites.com Usage implies agreement with terms.