<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: SHA-1 Broken and GnuPG (GPG)</title>
	<atom:link href="http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/</link>
	<description>Logging the activities of four Schwers.</description>
	<lastBuildDate>Sun, 01 May 2011 20:06:53 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Dave Brondsema</title>
		<link>http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/comment-page-1/#comment-16739</link>
		<dc:creator>Dave Brondsema</dc:creator>
		<pubDate>Sat, 16 Sep 2006 19:41:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.schwer.us/journal/?p=112#comment-16739</guid>
		<description>~/.gnupg/options is old and ignored by the latest versions of gnupg.  Instead, put &quot;digest-algo sha512&quot; into ~/.gnupg/gpg.conf</description>
		<content:encoded><![CDATA[<p>~/.gnupg/options is old and ignored by the latest versions of gnupg.  Instead, put &#8220;digest-algo sha512&#8243; into ~/.gnupg/gpg.conf</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Thomas Fischer&#8217;s weblog &#187; why enigmail and gpg does not work anymore after update</title>
		<link>http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/comment-page-1/#comment-15341</link>
		<dc:creator>Thomas Fischer&#8217;s weblog &#187; why enigmail and gpg does not work anymore after update</dc:creator>
		<pubDate>Sun, 03 Sep 2006 14:38:17 +0000</pubDate>
		<guid isPermaLink="false">http://www.schwer.us/journal/?p=112#comment-15341</guid>
		<description>[...] read there: http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/ [...]</description>
		<content:encoded><![CDATA[<p>[...] read there: <a href="http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/" rel="nofollow">http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/</a> [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andrew Hodgson</title>
		<link>http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/comment-page-1/#comment-5233</link>
		<dc:creator>Andrew Hodgson</dc:creator>
		<pubDate>Sat, 18 Mar 2006 18:58:24 +0000</pubDate>
		<guid isPermaLink="false">http://www.schwer.us/journal/?p=112#comment-5233</guid>
		<description>Enigmail seems to work fine as long as you use an RSA key...</description>
		<content:encoded><![CDATA[<p>Enigmail seems to work fine as long as you use an RSA key&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Steve</title>
		<link>http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/comment-page-1/#comment-4965</link>
		<dc:creator>Steve</dc:creator>
		<pubDate>Tue, 03 Jan 2006 15:03:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.schwer.us/journal/?p=112#comment-4965</guid>
		<description>Augie,

I think I may have just seen the light!  The key I am trying to encrypt to is a PGP-2.x generated one.  These keys have no algo preferences on them which probably results in some incompatibility problems.  I&#039;ve just tried with SHA-256 and received a similar error.</description>
		<content:encoded><![CDATA[<p>Augie,</p>
<p>I think I may have just seen the light!  The key I am trying to encrypt to is a PGP-2.x generated one.  These keys have no algo preferences on them which probably results in some incompatibility problems.  I&#8217;ve just tried with SHA-256 and received a similar error.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: augie</title>
		<link>http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/comment-page-1/#comment-4964</link>
		<dc:creator>augie</dc:creator>
		<pubDate>Tue, 03 Jan 2006 14:39:39 +0000</pubDate>
		<guid isPermaLink="false">http://www.schwer.us/journal/?p=112#comment-4964</guid>
		<description>Steve,

Thanks for the feedback!

I actually do not receive that warning when I use SHA256 ; it seems to be specific to you using SHA512.

I read that warning as you are prefering SHA512, but maybe your recipient does not, so you would then be forcing them to.

My man page for gpg has this blurb:

http://linuxcommand.org/man_pages/gpg1.html

INTEROPERABILITY WITH OTHER OPENPGP PROGRAMS
       GnuPG tries to be a very flexible implementation of the  OpenPGP  stan-
       dard.   In  particular,  GnuPG implements many of the optional parts of
       the standard, such as the SHA-512 hash, and the ZLIB and BZIP2 compres-
       sion algorithms.  It is important to be aware that not all OpenPGP pro-
       grams implement these optional algorithms and that by forcing their use
       via  the  --cipher-algo,  --digest-algo,  --cert-digest-algo, or --com-
       press-algo options in GnuPG, it is possible to create a perfectly valid
       OpenPGP message, but one that cannot be read by the intended recipient.

So it would seem that gpg is just warning you that your recipient may not be able to handle your message.</description>
		<content:encoded><![CDATA[<p>Steve,</p>
<p>Thanks for the feedback!</p>
<p>I actually do not receive that warning when I use SHA256 ; it seems to be specific to you using SHA512.</p>
<p>I read that warning as you are prefering SHA512, but maybe your recipient does not, so you would then be forcing them to.</p>
<p>My man page for gpg has this blurb:</p>
<p><a href="http://linuxcommand.org/man_pages/gpg1.html" rel="nofollow">http://linuxcommand.org/man_pages/gpg1.html</a></p>
<p>INTEROPERABILITY WITH OTHER OPENPGP PROGRAMS<br />
       GnuPG tries to be a very flexible implementation of the  OpenPGP  stan-<br />
       dard.   In  particular,  GnuPG implements many of the optional parts of<br />
       the standard, such as the SHA-512 hash, and the ZLIB and BZIP2 compres-<br />
       sion algorithms.  It is important to be aware that not all OpenPGP pro-<br />
       grams implement these optional algorithms and that by forcing their use<br />
       via  the  &#8211;cipher-algo,  &#8211;digest-algo,  &#8211;cert-digest-algo, or &#8211;com-<br />
       press-algo options in GnuPG, it is possible to create a perfectly valid<br />
       OpenPGP message, but one that cannot be read by the intended recipient.</p>
<p>So it would seem that gpg is just warning you that your recipient may not be able to handle your message.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Steve</title>
		<link>http://www.schwer.us/journal/2005/02/19/sha-1-broken-and-gnupg-gpg/comment-page-1/#comment-4963</link>
		<dc:creator>Steve</dc:creator>
		<pubDate>Tue, 03 Jan 2006 13:48:32 +0000</pubDate>
		<guid isPermaLink="false">http://www.schwer.us/journal/?p=112#comment-4963</guid>
		<description>Hi there,
Thanks very much for these instructions, I found them very useful.

One problem I have encountered is when I want to encrypt and sign a message to a user who doesn&#039;t support my preferred algo.  I get:

gpg: WARNING: forcing digest algorithm SHA512 (10) violates recipient preferences

I can&#039;t figure out why I&#039;m forcing this algo, my entry in gpg.conf (digest-algo) should only select my preferred option, not force it.  Any thoughts on how to resolve this?</description>
		<content:encoded><![CDATA[<p>Hi there,<br />
Thanks very much for these instructions, I found them very useful.</p>
<p>One problem I have encountered is when I want to encrypt and sign a message to a user who doesn&#8217;t support my preferred algo.  I get:</p>
<p>gpg: WARNING: forcing digest algorithm SHA512 (10) violates recipient preferences</p>
<p>I can&#8217;t figure out why I&#8217;m forcing this algo, my entry in gpg.conf (digest-algo) should only select my preferred option, not force it.  Any thoughts on how to resolve this?</p>
]]></content:encoded>
	</item>
</channel>
</rss>

