Re: PGP and key storage.

steven.soroka@mts.mb.ca
Thu, 1 Oct 1998 13:47:24 -0500

• Next message: Ulf =?iso-8859-1?Q?M=F6ller?=: "Re: PGP and key storage."
• Previous message: Mike Stay: "Re: PGP and key storage."
• In reply to: steven.soroka@mts.mb.ca: "PGP and key storage."

And since IDEA is not a group cipher, (right?), there's no direct
correlation between stored keys and
obtaining passphrases (I think)..... Thank you! :-)

The password is hashed into an IDEA key, and then the RSA private key
is encrypted using IDEA.

-derek

steven.soroka@mts.mb.ca writes:

>
> Question.. How does PGP store its private keys that are encrypted with
the
> passphrases?
> Is it a simple xor? Or is the passphrase hashed into a key and then
xored?
>
> The reason I ask, is because I'm wondering, if I have more than one key
> pair... is there a security
> risk using the same passphrase? (other than compromise of one means
> compromise of the other).
> Is it possible for me to xor the two private keys together and retrieve
the
> passphrase? (or the hash of
> the passphrase?)
>
>
> Thanks!
>
>

--
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available

• Next message: Ulf =?iso-8859-1?Q?M=F6ller?=: "Re: PGP and key storage."
• Previous message: Mike Stay: "Re: PGP and key storage."
• In reply to: steven.soroka@mts.mb.ca: "PGP and key storage."