Re: feature request - ReadList.com

4 msg	[GPGol] GPGol won't install
4 msg	GnuPG UNC path on windows problem
28 msg	PGP messages getting flagged as spam
4 msg	Windows newbie
3 msg	which revoke?
8 msg	LDAP PGP Keyserver
8 msg	OmniKey CardMan 6121 & OpenPGP card anyone?
5 msg	pinentry-mac never displays any UI
2 msg	how can I use/test pinentry?
3 msg	GPG, card reader & udev

feature request
\ Mark E. Wunderlich (28 Sep 2007)
. \ Robert J. Hansen (28 Sep 2007)
. . \ John W. Moore III (28 Sep 2007)
. \ David Shaw (28 Sep 2007)

1 msg	[Half-OT] Materials for a GnuPg Talk
1 msg	Outlook/gpgol: encrypted mails in Sent folder
1 msg	OT Need pointers for generic smart card help
11 msg	gpgsm and Kmail and X509 certificates
7 msg	Surprising gnupg-agent action with OpenPGP card
1 msg	Ignore Signature
2 msg	Possible to pass the private key?
1 msg	Dealing with remaining plain text files
1 msg	Error using wildcards in gnupg

Subject:	Re: feature request
Group:	Gnupg-users
From:	David Shaw
Date:	28 Sep 2007

On Fri, Sep 28, 2007 at 10:29:31AM -0400, Mark E. Wunderlich wrote:
> I would like gpg to be able, when using symmetric ciphers, to produce
> `anonymous' output -- that is, output such that one cannot be sure that
> gpg produced it, or that a given passphrase does not successfully decode
> it. (That is, if you enter the wrong passphrase, you get garbage
> instead of an error message.)
>
> I would like to be able to do this so that, for example, I could run gpg
> repeatedly, and someone who was decoding the data would not know whether
> he was on the right track. I also might want to combine gpg with
> another approach, e.g., XOR-ing the target file against another file.
> Again, the idea would be that `anonymizing' gpg's output would make it
> more difficult for someone to untangle such combined approaches; the
> general idea is that the ability to produce `anonymous' output would
> make gpg a more flexible part of a larger toolkit.

This is a bad, or at least unnecessary feature. If GPG is strong,
there is no benefit in playing games with the file format to make it
look like something else. If GPG is not strong, you shouldn't be
using it in the first place.

David

_______________________________________________
Gnupg-users mailing list
Gnupg-users
http://lists.gnupg.org/mailman/listinfo/gnupg-users