private key protect cipher

Maxine Brandt ninjaforce@netcourrier.com
Thu Mar 27 19:05:02 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
On Wed, 26 Mar 2003 18:14:07 -0500
David Shaw <dshaw@jabberwocky.com> kindly replied to my question:

|Can someone kindly tell me which cipher GPG uses to encrypt the private
|keys on a keyring?

It depends on which version of GnuPG you are using.  For quite a while
now (since 1.0.4 at least?) it is CAST5.

Thanks David. Taking it a step further, is the strength of the session key
directly related to password strength? I'm thinking: OK I have a 128-bit
random-character password to open my private key, but does this give
me 256-bit security when I use Twofish or AES256 for messaging?

Cheers,

Maxine Brandt

- --

=========================================================
My PGP keys are at: http://www.torduninja.tk
=========================================================

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1-nr1 (Windows 2000)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iD8DBQE+gz1qKBY/R6nbCcARAhBgAJ0UYGBPoWqEsIFQKWgtNARCaN82xACfZdtM
acjXbl6OkfCODfIAsyk7Zvk=
=V2eZ
-----END PGP SIGNATURE-----