Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generators incompatibility. #8

Open
username1565 opened this issue Jun 14, 2018 · 5 comments
Open

Generators incompatibility. #8

username1565 opened this issue Jun 14, 2018 · 5 comments
Labels
question Further information is requested

Comments

@username1565
Copy link

username1565 commented Jun 14, 2018

Message. Encrypted by RSA public key, without sitnature.
Trying to decrypt this on https://smartninja-pgp.appspot.com/
Import private key + password, and message there...
But when I trying to decrypt, in console.log, I see: "Error in decryption import."
Then smartninja generator give me two another RSA keys.

By pub of this keys I did encrypt message on PGP Suite. Success!
Decryption on smartninja.com - success!

That means there is some incompatibility in key generators.
You can compare the code and fix this, just for fun, in your free time.

@TheChiefMeat
Copy link
Owner

TheChiefMeat commented Jun 14, 2018

I believe this isn't to do with PGP Suite. I believe this is to do with the way PGP keys themselves work. For a PGP to fully work in a browser application like PGP Suite, the generated PGP key needs SSH authentication otherwise the browser will fail to encrypt or decrypt the message.

Any keys generated in PGP Suite will automatically be given the SSH authentication priviledges, but other PGP key applications and generators might not give that priviledge as a default, or even as an option.

@TheChiefMeat
Copy link
Owner

You should be able to test this yourself with Kleopatra. If you generate a key with Kleopatra you'll see that you can choose to add Authentication to your key. Make a key without it and then try to sign a message in PGP Suite, it doesn't work.

@username1565
Copy link
Author

Oww, so you re-write this as SSH compatible... Then I think need to do something, like select menu, to make warranty of backward compatibility with orthodox source code.

@TheChiefMeat
Copy link
Owner

PGP Suite is ssh compatible, it is other PGP software that might not be.

@TheChiefMeat TheChiefMeat added the question Further information is requested label Jun 14, 2018
username1565 added a commit to username1565/pgp that referenced this issue Jun 14, 2018
- Add default filename.
- Add functions to working with file-names.
- Add tooltip to the buttons with filename included.
- Add default filename if message input as text.
- Add bin prefix for filenames if this downloading as binary.
- Now base64 encoded files available as txt-files.
- Fix "Message failed to verify" alert notification. If encrypted message try to verify Key not found in this case. If checksum mismatch - alert displayed now.
- Test decryption without check signature, for signed_and_encrypted, and try to got encrypted message after check signature.
	Big commentary in decrypt+verify function added. TheChiefMeat#7
- Found Generators incompatibility. Just leave this here, as todo note. TheChiefMeat#8
- Many tests made with different files and keys. There is possible to make Jasmine-test.

Have a nice day.
@username1565
Copy link
Author

username1565 commented Jun 16, 2018

I see SSH keys have another format:
https://moveit.ebsrmsco.com/doc/en/images_MOVEitDMZ/configutil_viewsshkey.png

http://www.cs.ucsb.edu/~tyang/class/140s14/ssh_files/puttygen-2.png

http://openfortress.nl/doc/usrman/shaman/pix/linux/keymanage_export_secshpubkey.png

https://www.jvmhost.com/articles/connect-putty-key-based-authentication-cpanel/SSH_private_key_download_ppk2.jpg

And if there is difference not with format (seems, like base64 encoded RSA keys),
but differense in heads only, then we can add the select menu
to get different types of RSA keys (and maybe ECC).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants