gnukeyring-discuss

Re: [gnukeyring-discuss] [Fwd: Keyring on Kyocera 6035?]

[Martin P. <mb...@sa...>]

On 26 Mar 2002, Jochen Hoenicke <Joc...@In...> wrote:

> I have to think about a different way.  Probably the best way is to 
> invoke the DES encryption routine and check whether it works.

The US encryption laws have changed since I started working on this.
(IANAL, etc.)  I think it might be now OK to just include an
implementation of DES in Keyring's distribution, if somebody wanted to
write a patch for that.  Possibly the built-in DES is faster than a C
implementation.

-- 
Martin 

Re: [gnukeyring-discuss] [Fwd: Keyring on Kyocera 6035?]

[Jochen H. <Joc...@In...>]

On Sunday, 24. March 2002 03:28, you wrote:
> > GNU Keyring 1.1 claims it requires PalmOS 3.0 with DES encryption
> > (MS-Chap support).  Since I'm running PalmOS 3.5.3, I'm guessing
> > that this thing either doesn't have MS-CHAP support or the
> > Kyocera doesn't return a version/info string that the program
> > recognizes.

The encryption routines keyring is using are not documented.  All 
information I got from the header files. When DES encryption is not 
supported, previous versions of keyring just gave up with a cryptic 
error message when creating the first record.  So I decided to query 
the sysFtrNumEncryption feature to check whether DES set. It seems 
that not all palms that support DES encryption also set this flag :(

I have to think about a different way.  Probably the best way is to 
invoke the DES encryption routine and check whether it works.

  Jochen

-- 
Jochen Hoenicke  --  ICQ: 101057678

[gnukeyring-discuss] [Fwd: Keyring on Kyocera 6035?]

[John-David C. <jd...@ne...>]

> GNU Keyring 1.1 claims it requires PalmOS 3.0 with DES encryption
> (MS-Chap support).  Since I'm running PalmOS 3.5.3, I'm guessing that
> this thing either doesn't have MS-CHAP support or the Kyocera doesn't
> return a version/info string that the program recognizes.
> 
> I've got TopGun SSH on it, as well as PalmVNC, so I know *some sort* of
> encryption/security is built into and/or loadable into the phone. (The
> TopGun web page seems to suggest that the NetLib library on the Kyocera
> is non-standard, though). GNU Keyring 1.0 works fine.  Any info I can
> provide to get this working??
> 
Thanks.

Re: [gnukeyring-discuss] Keyring 1.1 (stable) is out

[Jochen H. <hoe...@us...>]

On Monday, 11. March 2002 19:38, Florin Andrei wrote:
> On Mon, 2002-03-11 at 08:42, Jochen Hoenicke wrote:
> > Keyring for PalmOS 1.1
> > (previously GNU Keyring)
> >
> >   http://gnukeyring.sourceforge.net/
>
> Excellent!
>
> One thing that's missing from the announce and the website: an
> "upgrade mini-HOWTO". That is, some words for people who upgrade
> from 1.0 to 1.1, what is the "right" way to upgrade, etc.

Okay I put some small info in the faq and the download page.

The recommended way is to hotsync the new prc file to your palm 
(without removing the previous version). It may also work with 
beaming but I haven't tested it.

As always, make sure you keep backup of your Keys-Gtkr.pdb database 
in case something bad happens.

If you still have a Keys-Gtkr-Temp.pdb database on your PC remove it! 
It contains the secret encryption key.  

-- 
Jochen Hoenicke 

Re: [gnukeyring-discuss] Keyring 1.1 (stable) is out

[Florin A. <fl...@sg...>]

On Mon, 2002-03-11 at 08:42, Jochen Hoenicke wrote:
> Keyring for PalmOS 1.1
> (previously GNU Keyring)
> 
>   http://gnukeyring.sourceforge.net/

Excellent!

One thing that's missing from the announce and the website: an "upgrade
mini-HOWTO". That is, some words for people who upgrade from 1.0 to 1.1,
what is the "right" way to upgrade, etc.

Keep up the good work!

-- 
Florin Andrei

Had batteries advanced at the pace of the computer processor,
a double-A cell would contain more energy than a tactical nuke.

[gnukeyring-discuss] Keyring 1.1 (stable) is out

[Jochen H. <hoe...@us...>]

Keyring for PalmOS 1.1
(previously GNU Keyring)

Copyright 1999-2002 The GNU Keyring Sourceforge Team

  http://gnukeyring.sourceforge.net/

Keyring for PalmOS lets you securely store secret keys and
confidential information on a PalmOS handheld computer.  This
information might include: computer account passwords, credit card
numbers, GnuPG or PGP passphrases, SKey one-time-pads, or phone
banking keywords.

Keyring is Free Software, so you can inspect it to satisfy yourself of
its security, modify it to meet your needs, and share it with your
friends.

Records are encrypted using the well-trusted DES3 algorithm on a
master password.  For your convenience, the keyring can stay unlocked
for a time after you enter your master password.

When you need to set a password, Keyring can generate a random
password of specified length, optionally including letters, numbers or
symbols.

Changes from 1.0:

 * Renamed project from "GNU Keyring" to "Keyring for PalmOS".

 * Added an entropy pool contributed by Jochen Hoenicke
   <https://sf.net/users/hoenicke>, based on the Linux entropy device.
   This makes generated password harder to predict.

 * Ship a tar files containing the sources and a zip files containing
   all binaries.  I hope the zip file will reduce the incidence of
   people confused by truncated downloads.

 * Encryption keys are now stored on the heap, not in a temporary
   database, and are obliterated after use.  The encryption key is
   destroyed after the timeout elapses, and not on the next
   action.  Patch from Jochen Hoenicke.

 * Before the Palm enteres sleep mode, it returns from the edit
   form to the list form.  Patches from Mustafa Kocaturk
   <https://sf.net/users/mkocaturk> and Jochen Hoenicke.

 * Add a lock bitmap to display the state of the database.  Pressing
   it will lock the database immediately.

 * The master key can now be veiled when the data base unlocked.

 * Translations for Dutch, French, Norwegian, Italian and Japanese.

 * Login and Passwords are displayed in a special font to distinguish
   I and l.

Files may be downloaded from:

  https://sourceforge.net/project/showfiles.php?group_id=306

MD5 checksums (binary mode):

8db8039b693141cab111c57d0ae1cb7f  keyring-1.1-en.prc
7d94767d117a74ec6ab4c70f4b180288  keyring-1.1-de.prc
fa6d8b2bbda1d50018f98217f39d637a  keyring-1.1-fr.prc
568d786fc82d963c6f3118dc41be6476  keyring-1.1-es.prc
463a019e78564dda4cd36cce58cb0179  keyring-1.1-it.prc
850a23e1a778cd67149f42c2178f20e1  keyring-1.1-ja.prc
88c6cc650d4562fa8130428beeabac7c  keyring-1.1-nl.prc
61652f4badf7f9cbf3015c64f4654a89  keyring-1.1-no.prc
5b080d138641d6eb953f4ee35dde5137  keyring-1.1-no_NY.prc
0c272b50f173753a002c0d0947cea7ab  keyring-1.1-pt.prc
a7d66c3900b2eb434a6c08c9fce29e11  keyring-1.1-sv.prc
ab41780bce07270fa5a66a0bc44c46bb  keyring-1.1.zip
285bc67d0cc38eecf3946ab9a60ecdbd  keyring-1.1.tar.gz

-- 
Jochen Hoenicke,  New maintainer of keyring for PalmOS.

[gnukeyring-discuss] Keyring not taking Master Password

[Joe G. <jo...@ly...>]

Dont know what happened. One day everything worked fine, the next the
program would not take my password. Keeps saying it is incorrect. I was
wondering if there was any way at all to remove or change the password from
the existing database so that I can keep all of my current data in there. I
have a massive amount of data so I am trying everything to simply be able to
reset my password or figure out how and/or why it got changed.

[gnukeyring-discuss] New Maintainer - release 1.1pre3

[Jochen H. <Joc...@In...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

As Martin Pool's time is limited I have taken over maintenance of 
keyring. 

I released a new pre release keyring-1.1pre3.

News since pre2:

 * Bug fixes (initial master password, random generator)

 * Before the Palm enters sleep mode, it returns from the edit
   form to the list form.  Previously it was done after waking up.

 * Add a lock bitmap to display the state of the database.  Pressing
   it will lock the database immediately.

 * The master key can now be veiled to prevent over shoulder attacks.

 * Login and Passwords are displayed in a special font to distinguish
   I and l.

 * Generate button in keyedit form.

MD5 checksums (binary mode):

895d8fc7c0d68f82b7b2ee5e9e9c3ec6  keyring-1.1pre3.tar.gz
c40943cbb059cc85beb8ed1e66387d9a  keyring-1.1pre3.zip

The files are at the usual place:
  http://sourceforge.net/project/showfiles.php?group_id=306

Please test it and report bugs.

- -- 
Jochen Hoenicke  Email: hoe...@in...  
ICQ: 101057678

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8cTL4sTEv/cIwu2QRAl88AJ9XZk9/0+8HCHkfzMdyiKZP7vAGZQCeK3Yz
Hyo7yv2SWUSpdtVHQQ8uRAA=
=169r
-----END PGP SIGNATURE-----

Re: [gnukeyring-discuss] Read Keyring database on a PC

[Stefan W. <stw...@gm...>]

Hi,

the following program enables you to read palm keyring files on your windows
pc: http://www.wundrak.de/keyring/index.html

Stefan Wundrak

----- Original Message -----
From: Jérôme Baysset
To: gnu...@li...
Sent: Tuesday, February 12, 2002 10:16 AM
Subject: [gnukeyring-discuss] Read Keyring database on a PC


Hello,

My Palm is over and I can't read my keyring database anymore.
I have an archive on my PC. How may I read this file on the PC?

Thank's

Pebeonet

Re: [gnukeyring-discuss] Read Keyring database on a PC

[Gerhard S. <ger...@ep...>]

> My Palm is over and I can't read my keyring database anymore.
> I have an archive on my PC. How may I read this file on the PC?

Consider taking a look at jpilot (if you are using Linux). It has a
keyring-conduit in it's newest version 0.99.2. Take a look at

http://www.jpilot.org/

If you are using Windows someone other has to help you.

--=20
cu
  --=3D=3D Jerri =3D=3D--
Homepage: http://www.jerri.de/   ICQ: 54160208

[gnukeyring-discuss] Read Keyring database on a PC

[<jer...@wa...>]

Hello,

My Palm is over and I can't read my keyring database anymore.
I have an archive on my PC. How may I read this file on the PC?

Thank's=20

Pebeonet

[gnukeyring-discuss] is this project still alive?

[Tom A. <gra...@ya...>]

I was just wondering if the keyring project is still alive?  It's been
quite some time since a release was made... especially considering
Bug#430642 (Master password requested on fresh installation).


__________________________________________________
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com

Re: [gnukeyring-discuss] Problem with old password

[Jochen H. <hoe...@us...>]

On Wednesday, 30. January 2002 15:37, web...@we... wrote:
> Hi!
>
> Could somebody please help me with this problem:
> I downloaded keyring1.0 and played a little bit with it but didn't
> add valuable content. And I played around with the passwords. I
> always thought that I could de-install the program and data and
> start again with a freshly installed and clean keyring afterwards.
> This is what I tried now with version 1.1. But it asks me for the
> old password which I cannot remember. 

There's a bug in 1.1-pre2 that it always asks for the old master 
passsword, even if none was entered yet.  If you have all the build 
tools, you should use the CVS version or apply this patch:

http://sourceforge.net/tracker/index.php?func=detail&aid=441736&group_id=306&atid=300306

Another way is to install an old version, enter a new master password 
and then upgrade to 1.1-pre2.

-- 
Jochen Hoenicke  --  ICQ: 101057678

[gnukeyring-discuss] Problem with old password

[<web...@we...>]

Hi!

Could somebody please help me with this problem:
I downloaded keyring1.0 and played a little bit with it but didn't add valuable content. And I played around with the passwords. I always thought that I could de-install the program and data and start again with a freshly installed and clean keyring afterwards.
This is what I tried now with version 1.1. But it asks me for the old password which I cannot remember.
The question is: how can I get rid of the old version and the old password? There is no content in keyring that needs to be saved. I simply want to set a new password and start from scratch.

Thanks for your ideas and tips!

Regards,

Udo
________________________________________________________________
Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr! 
Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13

[gnukeyring-discuss] Burn Video To DVD (316)

[<ad...@we...>]

COPY YOUR DVD's!!

Why Spend upwards of $4000 on a DVD Burner when we will show you an alternative that will do the exact same thing for only $19.95? 

You heard us right - for the price of just 1 DVD's, we'll show you how to back up and/or create Your Own DVD's! 

Just upgraded to a DVD and still have a ton of VHS tapes lying around? With this program, not only can you burn & copy any DVD you've created, you'll also be able to transfer all your VHS tapes to DVD format as well!! 

You want to know more? Visit us at http://www.copydvd.net










5229700d71325bfb9c86edc1a1d60ce5fa86fef

Re: [gnukeyring-discuss] delete GNUkeyring passwd

[Jochen H. <hoe...@us...>]

On Monday, 17. December 2001 20:42, Scott Beckman wrote:
> Hello,
>
> I'm in a bit of a bind, and was hoping someone here may help.  I've
> looked elsewhere but can't seem to find any useful information.
>
> Last week I disabled the OS password options in the "Security"
> application.  Since this time, when I use the GNUkeyring, my
> password is not longer accepted!!!

This is the thrid time I see such a request.  There is no ultimate 
answer to this.  I think the easiest way is the following:

Make a backup of your keyring database "Keys-Gtkr.pdb" to the PC.  
Open it with a hex editor (or emacs hexl-mode) and change the byte at 
address 0x23 from 04 to 01. Then put that on your palm again and 
start keyring.  Keyring thinks it has an old database and asks 
whether it should upgrade it.  I tested this procedure and it works.  
It is important that you don't mistype your password when upgrading.

  Jochen

[gnukeyring-discuss] delete GNUkeyring passwd

[Scott B. <sc...@ka...>]

Hello,  

I'm in a bit of a bind, and was hoping someone here may help.  I've looked 
elsewhere but can't seem to find any useful information.  

I'm using GNUkeyring 1.0 and Palm OS v 3.5.2H

A long time ago I set the password on the OS to keep personal record 
masked.  I never really used this option and forgot the password.  I 
started using the GNUkeyring.  

Last week I disabled the OS password options in the "Security" 
application.  Since this time, when I use the GNUkeyring, my password is 
not longer accepted!!!

Is there anyway to repair the keyring?  If not, is there anyway I can 
crack the data file on my PC, via crack, or even brute force?  

In the future I'll keep a paper copy of my passwords locked in a firesafe, 
but at this time I need some solution to return to normal life. 

Thank you,
Scott Beckman

[gnukeyring-discuss] (no subject)

[Constantin T. <cl...@st...>]

Hi all - =


I hacked together some code this past week that allows me to decrypt the =
GNU
Keyring DB on a PC.  It's all written in Java and uses only the Java JDK =
1.3.1
as well as the Sun JCE 1.2.1 for crypto stuff (I think these are packaged=

together in the latest beta version of the Java SDK).

My reason for doing this is that I've always wanted to print out all my
passwords to a hard copy somewhere for backup.  I know this is dangerous =
from
a security point of view but I'm not entirely comfortable with backup to =
a PC.
 (I once had my laptop stolen, in the bag was also my Palm, and had I not=

printed out my address book to paper I would have lost everything.)

This is somewhat similar to the GUI that Stefan Wundrak wrote but that do=
esn't
allow you to just decrypt everything and print it out.  This code is real=
ly
simple - all you can do is enter in your password and then it decrypts al=
l the
records in your database and prints them out on the screen.  I then just =
cut
and paste the output into Word and print it out.

I don't have a website so I can't post the code anywhere, and being new t=
o
this mailing list don't know if attachments are allowed.  So if anyone wa=
nts
the code, just send me an email and I'll email it to you.

Thanks,
Constantin Tanno


____________________________________________________________________
   =

[gnukeyring-discuss] encryption key

[Florin A. <fl...@sg...>]

I'm not very good at crypto things, so maybe i'm asking the wrong
question...

Is there any way to choose the strength of the encryption when you
install GNUKeyring? I mean, suppose someone is using a "good" master
password, and the entropy problem is fixed. It may make sense,
sometimes, to choose a stronger encryption, if possible.

-- 
Florin Andrei

"'Fewer fundamental changes' is a mark of a system that isn't evolving
as quickly, and that is reaching middle age. We are probably not quite
there yet" - Linus Torvalds

Re: [gnukeyring-discuss] MS Windows Desktop Condoit

[Florin A. <fl...@sg...>]

On Mon, 2001-11-26 at 16:17, Martin Pool wrote:
> 
> I still want to maintain it, but this year I was studying and also had
> a pretty tumultuous work life.  So it doesn't get as much time as it
> deserves, but it is still slowly being developed.

Martin, thank you for the wonderful product. GNUKeyring is very cool;
i'm using it all the time and i reccomend it to other people.

Just one thing is bugging me: i understand that the fix for the entropy
problem is already done. Is there any chance to release a new version
soon, that will include this fix?
That's the only thing that worries me, security-wise, since i'm using a
"good" master password.

(ok, there are no "good" passwords, but oh well...)

-- 
Florin Andrei

"'Fewer fundamental changes' is a mark of a system that isn't evolving
as quickly, and that is reaching middle age. We are probably not quite
there yet" - Linus Torvalds

Re: [gnukeyring-discuss] problem of password recognition

[Jochen H. <jo...@gn...>]

On Tuesday, Nov 27 2001 you wrote:
> I used a palm pilot IIIe with a Palm OS V 3.3 and a gnukeyring
> version 1.0. I recently try to change the password of the palm
> security module but it seems that this change affect too the
> password of the keyring software. Since this change, I could not
> reach all the information stored in the keyring module because it
> do not recognize anymore my password. What can I do ? I have
> important information stored in this module.

The easiest way is to restore from a backup :)  If that doesn't work 
or if your backup is too old,  I have a hacked up version of keyring 
that will work around this problem.

The problem is that keyring stores the password hash in a secret 
record with index 0.  When this record is removed or just moved at a 
different entry the keyring will not accept the valid password 
anymore.  PalmOS may make some weired things with these secret 
entries when changing password.

Martin:  I think the password hash should be moved to the AppInfo 
block directly after the category information.  I have a patch that 
does this, are you interested in this change?  I still need to 
thoroughly test it.  However, it changes the database format, so it 
is probably a post 1.1 thing.

[gnukeyring-discuss] problem of password recognition

[alain b. <Ala...@ir...>]

Hi,

I used a palm pilot IIIe with a Palm OS V 3.3 and a gnukeyring=20
version 1.0. I recently try to change the password of the palm=20
security module but it seems that this change affect too the password=20
of the keyring software. Since this change, I could not reach all the=20
information stored in the keyring module because it do not recognize=20
anymore my password. What can I do ? I have important information=20
stored in this module.

thanks for any help or advice
Alain Brauman, Microbiologiste =E0 l'IRD
Laboratoire de Microbiologie du sol
Centre IRD de Bel-Air
BP  1386, Dakar S=E9n=E9gal=20

[gnukeyring-discuss] Keyring Conduit for Windows

[Stefan W. <stw...@gm...>]

I put a binary onto my website, you may try it, it works fine
on my system. I have not tested it on any other machine yet though.

http://www.wundrak.de/keyring/KeyringWin.zip

Have fun,
Stefan

Re: [gnukeyring-discuss] MS Windows Desktop Condoit

[Martin P. <mb...@sa...>]

On 26 Nov 2001, Florin Andrei <fl...@sg...> wrote:
> On Mon, 2001-11-26 at 14:40, Stefan Wundrak wrote:
> > 
> > I just made a quick hack, by grabbing some code from the keyring PC-Conduit,
> > adapting it
> > to win32, and building a little MFC GUI for it.

Thankyou!

> It may be great to do it with GTK, just like Gimp/Win32 is, so that
> rewriting the whole thing for Linux/BSD/Unix would be piece of cake.
> Maybe even Gnome-ify it, at some moment in the future.

I started writing some Java code towards it last weekend.  Java GUIs
are not perfect, but at least we would have some chance with a
language that supports graphics, crypto, and binary file manipulation
and that runs on most platforms.

> > Btw., what is the status of the keyring project anyway? Is anybody still
> > using this
> > software? I and quite a bunch of my friends do.
> 
> I sure do, and almost everyone i know (that's concerned about the
> security of their data on PalmOS PDAs).

I still want to maintain it, but this year I was studying and also had
a pretty tumultuous work life.  So it doesn't get as much time as it
deserves, but it is still slowly being developed.

-- 
Martin 

Re: [gnukeyring-discuss] MS Windows Desktop Condoit

[Florin A. <fl...@sg...>]

On Mon, 2001-11-26 at 14:40, Stefan Wundrak wrote:
> 
> I just made a quick hack, by grabbing some code from the keyring PC-Conduit,
> adapting it
> to win32, and building a little MFC GUI for it.

Excellent!

> It is not a real Conduit, but just a tool, that will read in the pdb file
> from the harddisk, display
> a list of records, and decrypts it if you select a record. Its not possible
> to enter data though.

It may be great to do it with GTK, just like Gimp/Win32 is, so that
rewriting the whole thing for Linux/BSD/Unix would be piece of cake.
Maybe even Gnome-ify it, at some moment in the future.

> Btw., what is the status of the keyring project anyway? Is anybody still
> using this
> software? I and quite a bunch of my friends do.

I sure do, and almost everyone i know (that's concerned about the
security of their data on PalmOS PDAs).

> Has the latest release any serious security issues?

Still waiting for the next release that is supposed to correct the
entropy thing... ;-)

-- 
Florin Andrei

"'Fewer fundamental changes' is a mark of a system that isn't evolving
as quickly, and that is reaching middle age. We are probably not quite
there yet" - Linus Torvalds