Changing preferences

Kevin Hilton kevhilton at gmail.com
Fri Sep 19 04:04:07 CEST 2008


> GnuPG in particular works like this:
>
> 1) Take the intersection of all recipients preference lists.  This
> rules out any algorithms that would be unusable by someone.
> 2) Elect a "decider".  The decider is the one person whose ordered
> list we will honor the rankings for.  If the user has specified a
> personal-*-prefs list, then the user is the decider.  If the user has
> not specified a list, then the last recipient key is used.
> 3) Walk the decider preference list from highest ranked to lowest
> ranked - as soon as we hit an algorithm that is part of the
> intersection from step #1, stop.
>
> For example:
>   Alice has AES CAST5 TWOFISH
>   Baker has CAST5 AES BLOWFISH
>   Charlie has BLOWFISH AES CAST5
>   Donald has CAMELLIA TWOFISH BLOWFISH
>
> Assuming that there is no personal-*-prefs list set), here's how it
> falls out:
>
>    Alice Baker Charlie == AES
>    Baker Alice Charlie == AES
>    Charlie Alice Baker == CAST5
>    Charlie Alice Baker Donald = 3DES


Thats a great explanation.  Perhaps this should be included in the
documentation.

Lastly however this is assuming the sender is not using the

cipher-algo
digest-algo

options.  From my reading of the documentation, this will force the
use of a particular cipher as dictated by the sender, even if the
algorithm is not contained in the list of the public keys.  I know
these two options are not recommended for use, however since they are
included as possible options, I think that they should at least be
covered by a "what if" scenario.

-- 
Kevin Hilton



More information about the Gnupg-users mailing list