Re: [HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG-2.0

24 msg	explain nrsign & lsign?
5 msg	openpgp card problem
4 msg	trust owner => trust his key?
3 msg	Insecure Memory Warning on HP-UX 11
1 msg	gpgkey2ssh
8 msg	working with bare gpg - how to close the text-b...
3 msg	passphrase for symmetric encryption // ?maximum...
17 msg	pinentry-qt (svn/r153) crashes on exec @ 'assua...
4 msg	Symmetric encypher with private key decypher
1 msg	new (2007-01-21) keyanalyze results (+sigcheck)
5 msg	installed pinentry not found by gpg-agent/gpg2

[HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG...
\ Alon Bar-Lev (21 Jan 2007)
. \ Benjamin Donnachie (28 Jan 2007)
. . \ Alon Bar-Lev (28 Jan 2007)
. . . \ Benjamin Donnachie (28 Jan 2007)
. . . . \ David Shaw (28 Jan 2007)
. . . \ Werner Koch (28 Jan 2007)

2 msg	C/C++ program to protect file
7 msg	sig-keyserver-url
4 msg	Upgrade from 1.0.4 to 1.4.6
5 msg	signing an verifying data without the need of f...
1 msg	can't connect to .gnome2/seahorse-sJsP3M/S.gpg-...
5 msg	Newbie - compiling gnupg-1.4.6 and GpgSM
3 msg	wildcard use in GnuPG
1 msg	--lock-never key corruption with encryption only?

Subject:	Re: [HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG-2.0
Group:	Gnupg-users
From:	David Shaw
Date:	28 Jan 2007

On Sun, Jan 28, 2007 at 07:33:15PM +0000, Benjamin Donnachie wrote:
> Alon Bar-Lev wrote:
> >> Do they /absolutely/ need to use GPG v2? If not, it's probably going to
> >> be easier if they go back to using v1.4.x...
> > This is the easy way out :)
>
> It's the one the gnupg team recommend!
>
> > gpg2 should be backward compatible... I would like to make it work
> > too... :)
>
> I understand that IDEA isn't OpenPGP compatible and, besides, the 1.4.x
> branch will continue to be maintained and developed.

It's not true that IDEA isn't OpenPGP compatible. IDEA is cipher #1
in OpenPGP, and the new RFC does not change that. It is absolutely
part of (though an optional part of) OpenPGP.

The problem with IDEA is that it is patented, and will be patented for
at least 3 more years (the exact end date depends on which country
you're in). Without going into endless detail, patented algorithms
and the GPL license are not really compatible with each other.

Even so, ask if you really need IDEA or not. Unless you have a
serious need for PGP 2.x compatibility, IDEA doesn't buy you much.

David

_______________________________________________
Gnupg-users mailing list
Gnupg-users
http://lists.gnupg.org/mailman/listinfo/gnupg-users