gpgsm-Problems

[Werner Koch]

On Mon, 14 Jun 2004 14:47:59 +0200, Andreas Bergen said:

> As I'm not a crypto-expert this is probably a stupid question, but, as far as 
> I understand 1.2.840.113549.3.2 stands for the 40bit and the 128bit version 
> of the rc2-algorithm, doesn't it? 

Maybe - I have not checked.

Frankly due to the lack of a test message I was not able to test the
RC2 decryption - it is after all a feature of Libgcrypt.

> 1.2.840.113549.3.2    is called RC2CBC
> and 
> 1.2.840.113549.1.12.1.6 is called pbeWithSHA1And40BitRC2_CBC

> What's the difference between these two?

There are probably other OIDs referring to the same cipher too.  IIRC,
I had to fix something in the implementation for pkcs#12
(pbeWithSHA1And40BitRC2_CBC)

> Are both 40bit?

There is a parameter giving trhe actual key length.

> Is there any way to decrypt outlook-40bit-messages?

Send me a test message.  Here is my test key:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----





Shalom-Salam,

   Werner