openpgp bug

[L. Sassaman]

On Thu, 22 Mar 2001, Frank Tobin wrote:

> L. Sassaman, at 20:40 -0800 on Wed, 21 Mar 2001, wrote:
>
>     > It sounds to me like a failure of the secret keyring file format and
>     > not of OpenPGP per se.
>
>     Explain. The secret key ring format is part of OpenPGP... so I fail to
>     grok your logic here.
>
> IINM, the format to exchange secret keys is covered by OpenPGP, but the
> keyring itself is not covered (I don't see why it would be; it's a
> client-side issue).

I miss-spoke. You are right about key ring formats, but this bug has
nothing to do with the key ring.

It has to do with how the secret key is encrypted, and that *is* covered
by OpenPGP.

__

L. Sassaman

Security Architect               |     "What's so amazing about
Technology Consultant            |      really deep thoughts?"
                                 |
http://sion.quickie.net          |                  --Tori Amos