[107393] in Cypherpunks
Re: PGP mess?
daemon@ATHENA.MIT.EDU (CyberPsychotic)
Wed Jan 13 09:44:57 1999
Date: Wed, 13 Jan 1999 19:14:50 +0500 (KGT)
From: CyberPsychotic <fygrave@tigerteam.net>
To: Ken Williams <jkwilli2@unity.ncsu.edu>
cc: cypherpunks@toad.com
In-Reply-To: <Pine.SOL.4.05.9901130754230.2548-100000@ultra1-224wi.eos.ncsu.edu>
Confirm-receipt-to: fygrave@usa.net
Reply-To: CyberPsychotic <fygrave@tigerteam.net>
~ encrypting with several keys, and more. all of this was done on Solaris
~ 2.5.1 and RH 5.2. the only problem i had was that i tried so many
~ variations that i got confused at one point and had to double check my
~ decoding/decompression process - maybe that's where your problem lies.
~
hmm.. actually I havent yet figured out the exact envinronment, which would
cause this, here're the facts which may help:
the package which me, and the remote party used:
pgp50i : (size: 927363) filename: pgp50i-unix-src.tar.gz
sig0: nullsig : 0
sig1: md5 : 1w0I0.05EgUAU1DdHXrI67
sig2: snefru : 19kLc5RLomjD4IMe:7PPKe
sig3: crc32 : 1mLf62
sig4: crc16 : 000Frt
sig5: md4 : 0jJCrV:hms4Rc0UCpMMhtl
sig6: md2 : 0JclxmSl7fioHkhZ2n6arv
sig7: sha : BT0h:2.LNtksrDWGdIPVBAxxAmp
sig8: haval : 1u9Em42UTcGB2kL9TYtyE7
sig9: nullsig : 0
--//--//--//--
Now what we are trying to do:
he has gzip'ed file, which he uuencodes, puts into message, and encrypts
with pgp using my public key:
Type Bits KeyID Created Expires Algorithm Use
pub+ 2048 0x9077009B 1998-11-10 ---------- RSA Sign & Encrypt
uid fygrave@tigerteam.net
hkp://keys.pgp.com/cyberpsychotic
--//---//--//---
and sends it to me. When I decrypt the message, the vaist
majority of the message is quite correct. (no text damage and so on).
However, when uudecode file, and in my attempt to decompress it, I find out
that the archive get damaged (few files get extracted however).Now I am
trying to look on uuencoded file, and find that several lines (about 2-3 in
100K file) in it are not completed, i.g. piece looks like this:
...
M"9X@U,_<3RF+`B?7`4@*`91R?4HG33+H-[2=8/HY/83O8JEHJM(9>I*&#A/R
MW!Q6-@THOI3BD/"&$E%^2L.'4:I(N2X]%_IM0W!R":&?P_H`"6H\\\Q(";G1
A_`C<7-HKM8JRV)H"56XTIR?)C-L#>`:!XI^F4D<<
MQ<)]2@`?96J98)QN#-1E1F;&.M<+`;BDL4)7IKK)8`1P[?%4ZE-3T3/+P+R]
MC29S@C/)T(PFS9>#*:@M+Q1H`8R)RJ"YDR9APD^L*FC*@&8OH.Z!(!J9\,,T
..
which doesn't look correct to me at all. Besides we compared md5 checksums
on both ends, and they do not match. This might seem to be a random mistake,
but so far 3 times of 4 attempts, such problem appeared.
So far I think some corruption happens on such way: (first we were guessing
that different versions of gzip may've caused this, till we compared
checksums)
gzip-->uuencode-->pgpcrypt--->pgpdecrypt-->uudecode.
Since uucode algorytm isn't compilcated much to cause such deformation, I
believe this is one of pgp processes ,or something which hangles pipes
from/to encryption. I haven't experimented enough to get predicable result
yet however.. I've got the feeling that it might be a bug of some pieces,
which I have piped between these things (sendmail/pine/ on my end).. I also
tried to get rid off most the pipes, and try to do things locally, sometimes
pgpv dies with an error message at the time, when it seem to have a half of
job already done:
bobby:/tmp$ pgpv ouch.enc
Opening file "/dev/null" type text.
Message is encrypted.
Need a pass phrase to decrypt private key:
2048 bits, Key ID 9077009B, Created 1998-11-10
"fygrave@tigerteam.net"
Enter pass phrase:
Pass phrase is good.
Opening file "ouch" type text.
[pause]
Invalid Parameter
bobby:/tmp$ ls -al oche ouch ouch.enc
-rw-rw-r-- 1 fygrave fygrave 395262 Jan 13 18:56 ouch.orig.uue
-rw------- 1 fygrave fygrave 277228 Jan 13 19:05 ouch
-rw-rw-r-- 1 fygrave fygrave 409060 Jan 13 18:53 ouch.enc
bobby:/tmp$
hints, ideas?
