newbie: --edit-key problem

[Alphax]

Michael D. Berger wrote:
>> -----Original Message-----
>> From: gnupg-users-bounces at gnupg.org 
>> [mailto:gnupg-users-bounces at gnupg.org] On Behalf Of John W. Moore III
>> Sent: Tuesday, April 18, 2006 7:30 PM
>> To: GnuPG Users List
>> Subject: Re: newbie: --edit-key problem
>>
>>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA256
>>
>> This is also from the Manual and should help set your prefs 
>> in gpg.conf.
>>
>> - --personal-cipher-preferences string
>>        Set  the  list of personal cipher preferences to string, this
>>        list should be a string similar to the  one  printed  by  the
>>        command  "pref"  in  the  edit menu.  This allows the user to
>>        factor in their own preferred algorithms when algorithms  are
>>        chosen via recipient key preferences.  The most highly ranked
>>        cipher in this list is also used for the --symmetric  encryp-
>>        tion command.
>>
>>
>> Remember, when placing Commands into gpg.conf the '--' prefix 
>> is omitted.
>>
>> JOHN ;)
> [...]
> 
> --personal-cipher-preferences string
> 
> did not seem to work either in the config file (without --) or in a
> command line.  It was "seen", however, since a misspelling resulted
> in a diagnostic.
> 
> I ultimately was able to add blowfish to my preferences with:
> 
>    gpg --edit-key mdb00
>       setpref BLOWFISH <followed by the things that were already there, no
> commas>
>       <confirm that I really want to do it>
>       <supply passphrase when asked>
>       <ignore output suggesting passphrase was not seen -- it was>
> 
> It is noteworthy that the 3DES cipher cannot be removed by this
> procedure, while any other cypher can.  I wonder why this is.
> 

The OpenPGP spec (RFC 2440) says that 3DES is *required* for a cipher
algorithm; it is mandatory that programs complying to the RFC implement
3DES as a cipher algorithm, DSA and Elgamal for keys, and SHA-1 for a
hash function.
http://en.wikipedia.org/wiki/Pretty_Good_Privacy#Feature_comparison sums
it up pretty neatly.

-- 
                Alphax
        Death to all fanatics!
  Down with categorical imperative!
OpenPGP key: http://tinyurl.com/lvq4g

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 551 bytes
Desc: OpenPGP digital signature
Url : /pipermail/attachments/20060420/e8da3fc9/signature.pgp