Re: PGP and key storage.

Derek Atkins (warlord@MIT.EDU)
01 Oct 1998 14:06:50 -0400

• Next message: Mike Stay: "Re: PGP and key storage."
• Previous message: steven.soroka@mts.mb.ca: "PGP and key storage."
• In reply to: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"
• Next in thread: Mike Stay: "Re: PGP and key storage."

The password is hashed into an IDEA key, and then the RSA private key
is encrypted using IDEA.

-derek

steven.soroka@mts.mb.ca writes:

>
> Question.. How does PGP store its private keys that are encrypted with the
> passphrases?
> Is it a simple xor? Or is the passphrase hashed into a key and then xored?
>
> The reason I ask, is because I'm wondering, if I have more than one key
> pair... is there a security
> risk using the same passphrase? (other than compromise of one means
> compromise of the other).
> Is it possible for me to xor the two private keys together and retrieve the
> passphrase? (or the hash of
> the passphrase?)
>
>
> Thanks!
>
>

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available

• Next message: Mike Stay: "Re: PGP and key storage."
• Previous message: steven.soroka@mts.mb.ca: "PGP and key storage."
• In reply to: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"
• Next in thread: Mike Stay: "Re: PGP and key storage."