Pgp Error Encrypted Session Key Is Bad

GnuPG Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Okay, here's gpg: decryption failed: bad key your answer. The test keys and message tht William gave me helped a gpg bad session key lot. It looks like GnuPG is listing Twofish, then Blowfish, then CAST as preferred algorithms. For some reason, GnuPG is gpg dbg cleared passphrase cached with id encrypting to Blowfish, instead of Twofish. (Bug, Werner?) To be decrypted in PGP 6.5.x, the message must use CAST, IDEA, or 3DES as the ESK. To be the most compatable with all gpg decrypt file implementations of OpenPGP, one should 3DES, as this will be present in all OpenPGP compliant programs. (IDEA and CAST5 are "shoulds", 3DES is a "must".) You are taking a chance with the others, if you plan to move the secret keys to a different program in the future. Note that this incompatability only applies to keys generated in one program, and imported and used in another. You could keep the old key and work around this by adding a new UID with a different preferred algorithm specified, and encrypting to that. - --Len. On Fri, 17 Mar 2000, Chris Ruvolo wrote: > On Thu, 16 Mar 2000, William X. Walsh wrote: > > >>>Well, I don't know about this. I've had a large problem with PGP 6.x not > >>>being > >>>able to decrypt messages encrypted by GnuPG, regardless if they key it is > >>>encrypting to was created in GnuPG or PGP. > >> > >> So you're saying that GnuPG and PGP are *not* compatible and people > >> using one may not be able to successfully exchange encrypted > >> documents with users of the other? > > > >The problem is persistant, and anytime I encrypt a message using GnuPG, users > >of PGP 6.5.x (for windows at least) cannot decrypt the message. It gives an > >error. I've reported this a few times in the past over the last few months. > > > >This is not an intermittent problem. > > > I can confirm this problem. I was one of the people th

SecureBlackbox Secure storage of files and documents Solid File System Virtualization of drives, folders, files Callback File System (CBFS) CallbackDisk CallbackFilter Control over file system operations Callback File System (CBFS) CallbackFilter Control over registry operations CallbackRegistry Direct access to disks RawDisk Synchronization framework Rethync SDK Secure heterogenous messaging MsgConnect For business integrators Secure protocols for transfer and keeping of binary data, files, documents and e-mails BizCrypto for MS SQL Server BizCrypto for MS BizTalk Server Virtual drive representing remote contents of any SFTP server SFTP Net Drive Product list SecureBlackbox Security of data, https://lists.gnupg.org/pipermail/gnupg-users/2000-March/005167.html files, documents and e-mails during transfer and in storages BizCrypto Security of business automation processes Solid File System Secure file and document storage Callback File System (CBFS) Virtualization of drives, folders, files CallbackDisk Virtual disk based on disk image CallbackFilter Control over file system access CallbackProcess Monitoring of process and threads creation and termination CallbackRegistry Control over registry access RawDisk Direct access to disks https://www.eldos.com/forum/read.php?FID=7&TID=698 Rethync SDK Synchronization framework MsgConnect Secure heterogenous messaging SFTP Net Drive Mount remote SFTP storages as local drives Support options My Control Center Knowledgebase Documentation on-line Helpdesk Forum Live chat About us Corporate information Company news Testimonials Valuable clients Partner program Contact us Home / Forums / Forum «SecureBlackbox» - EldoS Topics 1 - 10 of 4058 First|Prev.|1 2345|Next|Last Topics: 4058 Topic Title Topic Starter Replies Last Post Info Pinned: Tell us what you need by Eugene Mayevski (EldoS Corp.) 0 01/03/2010 03:23:17Author: Eugene Mayevski Pinned: Books to read by Eugene Mayevski (EldoS Corp.) 0 06/08/2009 10:35:26Author: Eugene Mayevski Pinned: IMPORTANT: Read before posting by Eugene Mayevski (EldoS Corp.) 0 12/10/2007 22:23:08Author: Eugene Mayevski Pinned: Welcome to the forum by Eugene Mayevski (EldoS Corp.) 0 04/14/2006 04:30:20Author: Eugene Mayevski Encoding URLs for the TElWebDAVClient.List (C++) by Bruce Thomson (Premium support level) 0 10/23/2016 03:39:36Author: Bruce Thomson Attaching the PKCS7 Signature to the PDF document (Pages: 1 2 ) by kranthi talluri (Basic support level) 15 10/21/2016 03:45:54Author: Dmytro Bogatskyy SBMessages.TElMessageSigner by marco hagen (Standard support level) 3 10/20/2016 09:45:08Author: marco hagen Several pr

Post #1 of 3 (1024 views) Permalink Problems with PGP user decrypting GPG files Hi everyone, We are in the process of testing our encryption / decrytion with some trading partners http://www.gossamer-threads.com/lists/gnupg/users/7690 that are using PGP 7.0.1 on windows 2000 advanced server. We are using gpg 1.0.6 on tru64 unix v5.1 on a DS10. I have imported into GPG their public keys, and our private/public pair that were http://marc.info/?l=gnupg-users&m=94858770915851&w=2 exported from PGP 6.5.8 on a PC. I encrypt files by using the following shell script: #!/bin/ksh # # Program Name: /usr/bin/encryptgpguser # # Author: Mike Kirkland # Date: 11-28-01 # # Purpose: This script session key will encrypt files past to it from server lyra # after encryption lyra will ftp files from this directory to be sent to payer # This script will be rexec from lyra with 2 parameters passed to it # # 1 the filename to be encrypted # 2 the payer's public key identifier to be used for encryption # # Modifications: N/A cd /gpguser USAGE="Usage: `basename $0` " # If no pgp error encrypted filename or more than one, then tell how to use this script FILENAME="$1" PUBKEYID="$2" if [ "$#" -ne 2 ]; then # Check to see that only one filename and keyid is passed in echo ; echo $USAGE; exit 1; fi if [ -s "$FILENAME" ]; then # -s option checks that file exists and filesize > 0 if [ $? -eq 0 ] ; then echo ; echo "filename $FILENAME found and is not an empty file"; if [ -e "$FILENAME.gpg" ]; then rm $FILENAME.gpg; /usr/bin/gpg --batch -q --no-tty --no-verbose --no-secmem-warning -r "$PUBKEYID" -e "$FILENAME"; echo "PART 1 filename $FILENAME successfully encrypted and copied as $FILENAME.gpg" ; exit 0; else /usr/bin/gpg --batch -q --no-tty --no-verbose --no-secmem-warning -r "$PUBKEYID" -e "$FILENAME"; echo "PART 2 filename $FILENAME successfully encrypted and copied as $FILENAME.gpg" ; exit 0; fi else echo "ERROR filename $1 encryption failed!! check $USAGE or call your Unix System Administrator" fi else echo "ERROR filename $1 is not found or filesize is zero bytes" fi exit $? Everything is ok on the encryption, but when our trading partner gets the file they get this error message: Error: encrypted session key is bad Any thoughts? Thanks Mike Kirkland Unix System Administrator National Data Corporation Phone: (918) 481-2817 Fax: (918) 481-4275 mike.kirkland [at] ndchealth

SIGNED MESSAGE----- Hash: SHA1 On 22-Jan-2000 William X. Walsh wrote: > When I encrpt a file to a public key using GPG, then decrypt it using PGP > 6.5.2 > on windows, I get an error "An error has occured: encypted session key is > bad" > > Has anyone encountered this and can tell me what options to pass to GPG to > solve it? Just an addendum, the original error was when attempting to use the GSecure cgi script to encrypt form input before emailing. As I said, I can decrypt fine using GPG, but in this case the client is using Windows PGP 6.5.2. This morning I encrypted a text file manually, and tried to decrypt it using PGP 6.5.2 in windows (gotta love vmware) and had the same problem (encrypted session key is bad) and it can't decrypt it. So it's not directly related to the CGI script. I've been reading the docs and list archives and so far can't find any option that might solve this, so if anyone has any possible solution for me to try, I'd be most appreciative. - -- William X. Walsh DSo Networks http://dso.net/ Fax: 877-860-5412 or +1-559-851-9192 GPG/PGP Key at http://dso.net/wwalsh.gpg -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: DSo Networks iD8DBQE4ikwb8zLmV94Pz+IRAsPDAKD4cZ15FxgvhmsMK+UvGhtE/oW2VACfb0Xq MdGI6y86yRsFQzGNQ7T5DRo= =vavl -----END PGP SIGNATURE----- [prev in list] [next in list] [prev in thread] [next in thread] Configure | About | News | Addalist | SponsoredbyKoreLogic