Menu
▾
▴
gnukeyring-discuss
You can subscribe to this list here.
| 2000 |
Jan
|
Feb
(9) |
Mar
(4) |
Apr
(5) |
May
(27) |
Jun
(3) |
Jul
(5) |
Aug
(3) |
Sep
(25) |
Oct
(21) |
Nov
(2) |
Dec
(2) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 |
Jan
(3) |
Feb
|
Mar
(3) |
Apr
(9) |
May
(2) |
Jun
(20) |
Jul
(9) |
Aug
(2) |
Sep
(5) |
Oct
|
Nov
(8) |
Dec
(3) |
| 2002 |
Jan
(3) |
Feb
(6) |
Mar
(13) |
Apr
(20) |
May
(10) |
Jun
(6) |
Jul
(2) |
Aug
(2) |
Sep
|
Oct
|
Nov
|
Dec
|
| 2003 |
Jan
(10) |
Feb
|
Mar
(2) |
Apr
|
May
(2) |
Jun
(1) |
Jul
(3) |
Aug
(1) |
Sep
|
Oct
(12) |
Nov
(1) |
Dec
(5) |
| 2004 |
Jan
(3) |
Feb
(3) |
Mar
|
Apr
(6) |
May
(4) |
Jun
|
Jul
|
Aug
(1) |
Sep
|
Oct
|
Nov
(1) |
Dec
(1) |
| 2005 |
Jan
(9) |
Feb
(8) |
Mar
(12) |
Apr
(8) |
May
|
Jun
(6) |
Jul
|
Aug
(1) |
Sep
(1) |
Oct
|
Nov
|
Dec
(3) |
| 2006 |
Jan
(3) |
Feb
(3) |
Mar
(3) |
Apr
|
May
(2) |
Jun
|
Jul
|
Aug
(4) |
Sep
|
Oct
|
Nov
|
Dec
|
| 2007 |
Jan
|
Feb
|
Mar
(4) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(3) |
Oct
(1) |
Nov
(2) |
Dec
|
| 2008 |
Jan
|
Feb
(1) |
Mar
|
Apr
|
May
|
Jun
(2) |
Jul
(2) |
Aug
(2) |
Sep
|
Oct
|
Nov
|
Dec
|
| 2009 |
Jan
|
Feb
(9) |
Mar
|
Apr
(3) |
May
|
Jun
|
Jul
|
Aug
(1) |
Sep
(1) |
Oct
|
Nov
|
Dec
|
| 2010 |
Jan
|
Feb
(2) |
Mar
(2) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(3) |
Oct
|
Nov
|
Dec
|
| 2011 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
(2) |
Nov
|
Dec
|
| 2013 |
Jan
|
Feb
(1) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(4) |
Oct
|
Nov
|
Dec
|
|
From: Timm M. <har...@ru...> - 2002-04-29 13:32:39
|
<> > I dont really see any need to change the cipher. Maybe if you wanted > to give users an option of selecting what cypher they like. 3DES is > considered by many to be the most secure algorithm, but you might > think of CAST for its speed while still being a 128bit cypher. The advantage of using DES is that it has 20 years of cryptanylisis behind= =20 it and brute-force is still the best way to attack it (sorta). The problem = with it is that=20 the key size is too small, so brute-force is a viable meathod of attack. In= 1993,=20 it was estimated that for $1 million (US), you could build a specialized co= mputer=20 that could break any DES message in a few hours time. That price is well w= ithin=20 range of most governments and large buisnesses. These days, with a little= =20 programming knowledge, you could probably get a few freinds with some GHz= =20 machines and break it in a few days or hours. 3DES nicely works around this problem. I think GNU Keyring should keep 3DES= =20 because: 1) It works, and 2) we don't know how well newer ciphers (like AES= )=20 are going to hold up after 20 years. As long as it is easy to change the al= gorithm=20 should a breakthrough in cracking DES occur, there should be no problem in= =20 continuing to use 3DES. |
|
From: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX - 2002-04-29 10:22:04
|
{continued from forum thread:}
[quote]
Date: 2002-04-29 19:31
Sender: hoenicke
Logged In: YES
user_id=18252
Keyring is currently using only 112 bit keys for des (the
key for third DES is the same as the one for the first. In
openssl this is called des_ecb2.
I'm thinking about changing the encryption in the future,
but as this means another incompatible database format
this is a change that I don't want to do ad hoc.
Another drawback of the current encryption scheme is the
use of simple ecb instead of ofb or cfb mode. The effect
is that one can determine which records match on parts of
the data, e.g which have the same account.
As I now changed to pilotSSLeay there is no reason to
stick to 3DES at all. We could use other faster encryption
routines. If you want to discuss this, we can do this on
the keyring-discuss mailing list.
[/quote]
Hello hoenicke,
I wasnt sure if 3DES had a keylength of 112 bits or 168 bits; Thanks
for clearing that up :)
I dont really see any need to change the cipher. Maybe if you wanted
to give users an option of selecting what cypher they like. 3DES is
considered by many to be the most secure algorithm, but you might
think of CAST for its speed while still being a 128bit cypher.
Does the change to the pilotSSLeay library mean that there will be
more ciphers to choose from, or is there a speed difference?
Cheers,
/Tony
http://messenger.yahoo.com.au - Yahoo! Messenger
- A great way to communicate long-distance for FREE!
|
|
From: regis r. <re...@re...> - 2002-04-28 13:17:51
|
On 26-Apr-2002 Jochen Hoenicke wrote: > You can try the 1.2-pre1 prerelease, which comes with the pilotSSLeay > encryption routines. So this version works even if you don't have > encryption in your OS. Note that this is a prerelease so you should > especially make sure you have a working backup. Thanks. This solved my problem and I can retrived my passwords! This pre-release works fine. -- <regisr> http://regisr.regix.com/ portail photo http://www.regix.net magazine http://www.regix.com/ |
|
From: Jochen H. <jo...@gn...> - 2002-04-26 10:57:45
|
On Thursday, 25. April 2002 23:57, regis rampnoux wrote: > Hello, > > I had keyring, I don't remember the version.. > > I installed a xtra xtra pro card with 2Mo flash on my Palm III / > Palm OS 3.3.0 and keyring did not work now (error when > desencryption is requested). I tried to install the 1.1 version, > now I have a message about the MS-CHAP support database not found. > How can I restore it? With Palm OS 3.3 upgrade procedure? I don't know anthing about the xtra xtra pro card. Probably they left out the encryption routines from the ROM image. You can try the 1.2-pre1 prerelease, which comes with the pilotSSLeay encryption routines. So this version works even if you don't have encryption in your OS. Note that this is a prerelease so you should especially make sure you have a working backup. Jochen -- Jochen Hoenicke -- ICQ: 101057678 |
|
From: regis r. <re...@re...> - 2002-04-25 21:57:54
|
Hello, I had keyring, I don't remember the version.. I installed a xtra xtra pro card with 2Mo flash on my Palm III / Palm OS 3.3.0 and keyring did not work now (error when desencryption is requested). I tried to install the 1.1 version, now I have a message about the MS-CHAP support database not found. How can I restore it? With Palm OS 3.3 upgrade procedure? Any idea? -- <regisr> http://regisr.regix.com/ portail photo http://www.regix.net magazine http://www.regix.com/ |
|
From: Jay T. <jay...@po...> - 2002-04-25 15:43:43
|
>> > > I'm running Palm OS 3.5.3. I tried in vain to reproduce the > >> problem within POSE so I could post a screen shot. JH> Did you try to download the rom image from your phone? Pose includes JH> a small Palm application to do that. It may be a bug that happens JH> only with this particular ROM. I was able to transfer the ROM to my PC, but it looks like POSE doesn't support the Kyocera ROM. When I try to start a new session with that ROM file, POSE immediately crashes. Bummer. -- Jay mailto:jay...@po... |
|
From: Jochen H. <Joc...@In...> - 2002-04-25 11:35:33
|
On Wednesday, 24. April 2002 20:55, John-David Childs wrote: > On Mon, 2002-04-22 at 09:57, Jay Thrash wrote: > > I recently started using a Kyocera 6035 as my main Palm OS > > device, so I was quite eager to download 1.2-pre1 since it > > includes the missing encryption libraries needed to run Keyring > > on this device. After using it a few times, I've run into a > > weird problem - for some reason, the "normal" font gets replaced > > with a much larger font. The font is so large that I cannot read > > most of the form fields because all that's displayed is the top > > half of the characters. Sometimes, the switch from normal to > > large font occurs while I'm entering my password - half the > > password is normal and half is large! Weird! Exiting the > > program and restarting it usually fixes the problem. > > I can confirm the exact same symptoms on my Kyocera 6035...with the > added bonus that as I was trying to figure out exact conditions > when font change occurs (or can be reset back to normal (i.e. by > clicking somewhere else on the screen), my palm locked up hard and > had to be reset. This symptoms sound very weird. I use user defined fonts for passwords and accounts, but I have never seen this effect before. However, I have neither a Kyocera 6035 nor a rom image for that. My first guess is that some random data is overwritten. However, I tested keyring under pose-3.5, which should detect memory leaks or random corruption, and it didn't report any problems with keyring or the SSL libs. > I wonder if the included SSL stuff conflicts with the libraries > from TGSSH which were also on my palm. The libraries included are unmodified versions from pilotSSLeay-2.01. If TGSSH uses them or has the SSL code statically linked there should be no problems. > Jay Thrash wrote: > > > > I'm running Palm OS 3.5.3. I tried in vain to reproduce the > > problem within POSE so I could post a screen shot. Did you try to download the rom image from your phone? Pose includes a small Palm application to do that. It may be a bug that happens only with this particular ROM. Jochen |
|
From: John-David C. <jd...@nt...> - 2002-04-24 18:56:04
|
I can confirm the exact same symptoms on my Kyocera 6035...with the added bonus that as I was trying to figure out exact conditions when font change occurs (or can be reset back to normal (i.e. by clicking somewhere else on the screen), my palm locked up hard and had to be reset. I wonder if the included SSL stuff conflicts with the libraries from TGSSH which were also on my palm. On Mon, 2002-04-22 at 09:57, Jay Thrash wrote: > Hello all, > > Monday, April 22, 2002, 9:58:50 AM, you wrote: > > JH> I just put a prerelease keyring-1.2-pre1 on the sourceforge > JH> download page. There're some new features that I want to get > JH> tested by a broader audience and/or get some feedback. Please > JH> keep a backup of your password files before testing this release. > > First off, I want to say how much I appreciate all the work that goes > into Keyring. I'm not exaggerating when I say that it is the most > heavily used application on my PDA! > > I recently started using a Kyocera 6035 as my main Palm OS device, so > I was quite eager to download 1.2-pre1 since it includes the missing > encryption libraries needed to run Keyring on this device. After > using it a few times, I've run into a weird problem - for some reason, > the "normal" font gets replaced with a much larger font. The font is > so large that I cannot read most of the form fields because all that's > displayed is the top half of the characters. Sometimes, the switch > from normal to large font occurs while I'm entering my password - half > the password is normal and half is large! Weird! Exiting the program > and restarting it usually fixes the problem. > > I'm running Palm OS 3.5.3. I tried in vain to reproduce the problem > within POSE so I could post a screen shot. > > Has anyone else seen this? > > -- > Jay mailto:jay...@po... > > > -- > GNUKeyring-discuss mailing list > GNU...@li... > https://lists.sourceforge.net/lists/listinfo/gnukeyring-discuss |
|
From: Florin A. <fl...@sg...> - 2002-04-23 17:55:07
|
Hey, there's another PDA application that does the same thing, and has the same name: http://www.scrypt.net/~celer/kweb/ But it's running on Qtopia (Sharp Zaurus). -- Florin Andrei There's nothing to be ashamed of in coming up with the obvious, especially when nobody else is coming up with it. |
|
From: Jay T. <jay...@po...> - 2002-04-22 15:57:35
|
Hello all, Monday, April 22, 2002, 9:58:50 AM, you wrote: JH> I just put a prerelease keyring-1.2-pre1 on the sourceforge JH> download page. There're some new features that I want to get JH> tested by a broader audience and/or get some feedback. Please JH> keep a backup of your password files before testing this release. First off, I want to say how much I appreciate all the work that goes into Keyring. I'm not exaggerating when I say that it is the most heavily used application on my PDA! I recently started using a Kyocera 6035 as my main Palm OS device, so I was quite eager to download 1.2-pre1 since it includes the missing encryption libraries needed to run Keyring on this device. After using it a few times, I've run into a weird problem - for some reason, the "normal" font gets replaced with a much larger font. The font is so large that I cannot read most of the form fields because all that's displayed is the top half of the characters. Sometimes, the switch from normal to large font occurs while I'm entering my password - half the password is normal and half is large! Weird! Exiting the program and restarting it usually fixes the problem. I'm running Palm OS 3.5.3. I tried in vain to reproduce the problem within POSE so I could post a screen shot. Has anyone else seen this? -- Jay mailto:jay...@po... |
|
From: Jochen H. <Joc...@In...> - 2002-04-22 13:59:37
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I just put a prerelease keyring-1.2-pre1 on the sourceforge download page. There're some new features that I want to get tested by a broader audience and/or get some feedback. Please keep a backup of your password files before testing this release. I only builded the most popular languages; the final release will contain all supported languages again. Changes from 1.1: * Support PalmOS global Find. * Support interactive search for a key name on list form.} * Keyedit form is left on auto off if the timeout has also expired. Code works for all supported PalmOS versions. * Use pilotSSLeay for encryption, which is a bit faster than the PalmOS builtin encryption. The binaries from pilotSSLeay are included. * The last-modified-date is back again. * Support larger notes, up to 32000 characters. Files may be downloaded from: https://sourceforge.net/project/showfiles.php?group_id=306 MD5 checksums (binary mode): 37ce51fc49e22b6483017451a02e6311 keyring-1.2-pre1-en.zip d4084aabbe3d9ef022cb6c23d1d51353 keyring-1.2-pre1-ja.zip e1d3733cebe6fe3516f3c2109b5cca85 keyring-1.2-pre1-de.zip 8c2fc713a5eec44ba0d21d7fa0817c49 keyring-1.2-pre1.tar.gz - -- Jochen Hoenicke Email: hoe...@in... ICQ: 101057678 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE8xBc8sTEv/cIwu2QRAjCeAJ4w51j4Hvnm9XUe8U36EITh4PO4wQCdHiqc Yozu+FEtDJR5Kdgxo3vHQzs= =laAf -----END PGP SIGNATURE----- |
|
From: John-David C. <jd...@nt...> - 2002-04-22 05:16:54
|
On Sun, 2002-04-21 at 12:27, Will Stevenson wrote: > Wouldn't load on my Kyocera Smartphone. > Complained with: > Not enough Features Already asked and answered (check the archives)...try the CVS version > This version of KeyRin > requires PalmOS 3.0 and the DES encryption feature (MS-Chap > support). > It cannot run here. > > PalmOS is 3.5.1 > > Any suggestions? > > -- > GNUKeyring-discuss mailing list > GNU...@li... > https://lists.sourceforge.net/lists/listinfo/gnukeyring-discuss |
|
From: Will S. <tg...@fr...> - 2002-04-22 00:18:39
|
Wouldn't load on my Kyocera Smartphone. Complained with: Not enough Features This version of KeyRin requires PalmOS 3.0 and the DES encryption feature (MS-Chap support). It cannot run here. PalmOS is 3.5.1 Any suggestions? |
|
From: Martin P. <mb...@us...> - 2002-04-15 07:34:32
|
Hi, Alexander. Please try the recent 1.1 release instead. On 14 Feb 2002, Alexander Naumochkin <as...@ip...> wrote: > Hello Martin! > > I've just downloaded Keyring 1.1pre2 for PalmOS from sourceforge and > installed it on my Palm III, running PalmOS v3.3. After starting > Keyring shows me "Beta Software" warning and asks me for my password to > unlock. But it is first start of Keyring, what is the password Keyring > asks me for? > > I've tried to delete Keyring from Palm and reinstall it again. The > problem is the same :( I've read all documents from archive > keyring-1.1pre2.zip (install, readme, src/hacking, src/tests), but found > nothing about "first time password" or something like this. > > What is my mistake? > > Thanks in advance... > -- Martin |
|
From: Florin A. <fl...@sg...> - 2002-04-12 18:26:32
|
On Fri, 2002-04-12 at 08:54, Jochen Hoenicke wrote: > On Thursday, 11. April 2002 18:52, Artur Pinheiro wrote: > > Hi, > > > > What is the correct procedure to upgrade keyring from 1.0 to 1.1? > > Just install the new PRC file. Don't delete the old version of > keyring, it is overwritten automatically. Yes, that worked fine for me. Palm m100, PalmOS-3.5.1 But i baked up everything before upgrading. ;-) -- Florin Andrei Adding manpower to a late software project makes it later. |
|
From: Nick A. <and...@te...> - 2002-04-12 18:10:32
|
Hello Artur Pinheiro, On Thursday, April 11 2002 at 09:52 AM PDT, you wrote: > I have tryed it in the emulator and I lost all records. I dont want > that to appens in my palm... That is exactly what happened to me as well. I don't know how I lost all my data, but when I tried to open my database, I was presented with a dialogue box asking me to input a new Passphrase. Somehow I either inadvertently deleted my Keys-Gtkr.pdb , or the old database was over written with the new. :o( Having HotSynced a number of times since upgrading, I even lost my backup copy. -- Nick Andriash Courtenay, B.C. Canada |
|
From: Jochen H. <jo...@gn...> - 2002-04-12 15:54:38
|
On Thursday, 11. April 2002 18:52, Artur Pinheiro wrote: > Hi, > > What is the correct procedure to upgrade keyring from 1.0 to 1.1? Just install the new PRC file. Don't delete the old version of keyring, it is overwritten automatically. > I have tryed it in the emulator and I lost all records. I dont want > that to appens in my palm... I can't reproduce this. Can you explain step by step how you proceeded? Jochen -- Jochen Hoenicke -- ICQ: 101057678 |
|
From: Artur P. <art...@no...> - 2002-04-11 16:52:44
|
Hi, What is the correct procedure to upgrade keyring from 1.0 to 1.1? I have tryed it in the emulator and I lost all records. I dont want that to appens in my palm... Artur |
|
From: Martin P. <mb...@sa...> - 2002-03-28 01:30:20
|
On 27 Mar 2002, Jochen Hoenicke <hoe...@us...> wrote: > Hello, > > I wanted to let you know that the CVS version has already a lot of > new features, That's great! Well done. -- Martin |
|
From: Florin A. <fl...@sg...> - 2002-03-27 13:35:04
|
On Wed, 2002-03-27 at 02:33, Jochen Hoenicke wrote: > > of your database. New features are: > > - Support palms global search function. > - Interactive search on list page. > - The last changed date field is back. > - Different hide on auto-off behaviour (works for PalmOS 3.0) > - Link to pilotSSLeay for crypto functions. Awesome! -- Florin Andrei "Sorry judge, we would like to publish the file formats, but the data is not stored in files. It is stored in a database that is an indivisible part of the operating system." - a potential future Microsoft excuse |
|
From: Stefan W. <stw...@gm...> - 2002-03-27 11:56:18
|
> Second question, is there an application to decode and display the Keys file > on a PC if for example you lose your palm and need the data. > Try this: http://www.wundrak.de/keyring/index.html Stefan Wundrak |
|
From: Jochen H. <jo...@gn...> - 2002-03-27 11:18:04
|
On Wednesday, 27. March 2002 00:02, Stuart Gall wrote: > Hello, > I am using V1.0 when I delete a key, there is a check box for "Save > archive copy on PC" > What does this do? > And if it does the obvious, where exactly is the archive saved and > how do you get it back? It works the same way as for other palm applications. The desktop conduit needs to support this. I'm not sure if there's already one that can handle this. > Second question, is there an application to decode and display the > Keys file on a PC if for example you lose your palm and need the > data. Under linux there is a plugin for jpilot (shipped with jpilot). Or you can try the keyring-link application from the download section which dumps the keys to standard output. You need openssl to compile it. Jochen -- Jochen Hoenicke -- ICQ: 101057678 |
|
From: Jochen H. <hoe...@us...> - 2002-03-27 10:33:55
|
Hello, I wanted to let you know that the CVS version has already a lot of new features, so if you aren't afraid of crashes you may want to have a look into it. If you don't know how to download/compile the CVS version you shouldn't test it at this stage :) Please keep a backup of your database. New features are: - Support palms global search function. - Interactive search on list page. - The last changed date field is back. - Different hide on auto-off behaviour (works for PalmOS 3.0) - Link to pilotSSLeay for crypto functions. The behaviour of global search functions depends on the lock status of the keyring database. When it is unlocked all fields are searched, otherwise only the name fields (which is the only part that isn't encrypted). When the palm turns off while showing confidential data, the form is only left if the password timeout has already passed. Also this feature doesn't work anymore when a dialog is open, such as the generate password dialog or the about box. I will be away for the next two weeks. I will answer any question when I'm back. Jochen -- Jochen Hoenicke -- ICQ: 101057678 |
|
From: Jochen H. <hoe...@us...> - 2002-03-27 10:05:04
|
On Wednesday, 27. March 2002 06:44, Martin Pool wrote: > On 26 Mar 2002, Jochen Hoenicke <Joc...@In...> wrote: > > I have to think about a different way. Probably the best way is > > to invoke the DES encryption routine and check whether it works. > > The US encryption laws have changed since I started working on > this. (IANAL, etc.) I think it might be now OK to just include an > implementation of DES in Keyring's distribution, if somebody wanted > to write a patch for that. Possibly the built-in DES is faster > than a C implementation. Okay, the CVS version of keyring now links to the pilotSSLeay library from http://www.isaac.cs.berkeley.edu/pilot/ I only had some small technical problems (pilotSSLeay is for prc-tools 0.5.0). After fixing them I can decrypt my old database, so the crypto functions are identical :) -- Jochen Hoenicke -- ICQ: 101057678 |
|
From: Stuart G. <st...@ot...> - 2002-03-26 23:03:52
|
Hello, I am using V1.0 when I delete a key, there is a check box for "Save archive copy on PC" What does this do? And if it does the obvious, where exactly is the archive saved and how do you get it back? Second question, is there an application to decode and display the Keys file on a PC if for example you lose your palm and need the data. TIA Stuart st...@ot... ---------------------------------------------------------------------------- --------------------------------- Critical Error: REALITY.SYS Corrupted! Reboot universe? (y/n) [y]: |
12 messages has been excluded from this view by a project administrator.
