openpgp bug

L. Sassaman
Thu Mar 22 07:10:01 2001

On Thu, 22 Mar 2001, Frank Tobin wrote:

> L. Sassaman, at 20:40 -0800 on Wed, 21 Mar 2001, wrote:
> > It sounds to me like a failure of the secret keyring file format and
> > not of OpenPGP per se.
> Explain. The secret key ring format is part of OpenPGP... so I fail to
> grok your logic here.
> IINM, the format to exchange secret keys is covered by OpenPGP, but the
> keyring itself is not covered (I don't see why it would be; it's a
> client-side issue).
I miss-spoke. You are right about key ring formats, but this bug has nothing to do with the key ring. It has to do with how the secret key is encrypted, and that *is* covered by OpenPGP. __ L. Sassaman Security Architect | "What's so amazing about Technology Consultant | really deep thoughts?" | | --Tori Amos