HOW to upgrade: 2.0.22 --> 2.3.3 ???
Mike Schleif
mike at mdsresource.net
Fri Oct 4 14:41:24 CEST 2024
Yes, that makes sense.
However, I do not know if I can use this keyring - in this state - to
encrypt files?
Also, how ought I cleanup these old, unused keys?
~ Mike
On Fri, Oct 4, 2024 at 2:23 AM Werner Koch <wk at gnupg.org> wrote:
> Hi!
>
> You should not update to a 3 years old devel version. The current
> stable version is 2.4.5.
>
> > gpg: DBG: Oops: keyid_from_fingerprint: no pubkey; fpr:
> > 5d5ddc60954d5b06fa7b592ec45b70d9
>
> That is a PGP-2 key. Support for them has been dropped in version 2.1.0
> (2014):
>
> * gpg: All support for v3 (PGP 2) keys has been dropped. All
> signatures are now created as v4 signatures. v3 keys will be
> removed from the keyring.
>
> See also https://gnupg.org/faq/whats-new-in-2.1.html
>
> If you still have data encrypted to such keys, you need to install GnuPG
> 1.4.
>
> In the wake of the Snowden revelation there was a heavy move to newer
> algorithms and thus PGP-2 was considered broken by some people. In fact
> Google people heavily pledged for removing all support for PGP-2 for
> GnuPG. Meanwhile I think this was the wrong decision - keeping PGP-2
> decryption capabilities would have been easier than all the extra code
> to skip PGP-2 keys in existing keyrings. And of course the PGP-2
> encryption has not been broken - only signatures are vulnerable to the
> full MD5 hash algorithm attacks we know for 25 years.
>
>
>
> Shalom-Salam,
>
> Werner
>
> --
> The pioneers of a warless world are the youth that
> refuse military service. - A. Einstein
>
--
If ever I can be of service to you; contact me at once.
I wish for you a truly extraordinary day ...
--
Best Regards,
Mike Schleif
612-235-6060
https://mikeschleif.net
http://mdsresource.net
http://www.linkedin.com/in/schleif
http://facebook.com/MDSResource
http://twitter.com/mikeschleif
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20241004/726f1293/attachment.html>
More information about the Gnupg-users
mailing list