[cryptography] technical question about gpg on debian/sid

Charlie Derr cderr at simons-rock.edu
Tue Oct 15 11:04:43 EDT 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings all,
   I've only been lurking here for a short while, but I've really enjoyed the discussions (those that I have
understood anyway).  I run debian unstable/sid on this laptop and have enigmail configured with thunderbird.  I also
have claws-email setup to use this same key (with a different email account).  But it was pointed out to me (some
while back) that SHA-1 may not be the best choice.  Can anyone direct me as to how I might properly generate a new key
using SHA-256 or SHA-512?  My technical knowledge of encryption is lacking, so any advice on which is better (or if
there are other good choices that will interoperate with gpg/pgp?) would really be helpful.  I don't consider myself
in the "tinfoil hat" brigade (perhaps others see me differently, but that's OK), so for the moment (and until I
receive more solid information) I'm perfectly comfortable relying on AES.

   My preference would be for a solution that involves little customization beyond standard debian packages (and if
some mail client other than thunderbird or claws ends up being key, I'm happy to try to attempt to use a 3rd choice).
 But that's not a hard requirement, and if needed, I'm willing to build packages from source myself (as long as
there's a fair chance that my efforts will ultimately be successful).

   If this question is "off-topic" here, please accept my profuse apologies in advance (though I'd still appreciate
any help from anyone willing to respond to me off-list (if that's not "cheating")).

       thanks so very much in advance for your time,
            ~c

P.S. Obviously pointers to online documentation, where I can educate myself better about these things, are as good as
"answers".
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Icedove - http://www.enigmail.net/
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=n+UQ
-----END PGP SIGNATURE-----


More information about the cryptography mailing list