OT: PGP, commercial product vs opensource stuff - viability/usability

[Brian K. White]

----- Original Message ----- 
From: "John Esak" <john at valar.com>
To: "Fplist (E-mail)" <filepro-list at seaslug.org>
Sent: Sunday, October 30, 2005 9:56 PM
Subject: RE: OT: PGP,commercial product vs opensource stuff - 
viability/usability


>> I've helped people use GPG automatedly with their software before.  Piece
>> of cake.
>>
>> It -should- work just fine.  I'd save the money, personally.
>>
>> mark->
>
> I'm going to assume that you mean you've helped people use it on something
> other than the version you found available on SCO 6. I would also assume
> that it was NOT SCO 5.6, but probably Linux? If it was SCO 5.6, which 
> source
> di you use to compile and put in place for them. If it was anything other
> than SCO 5.6, the question is moot.
>
> John
>
> _______________________________________________
> Filepro-list mailing list
> Filepro-list at lists.celestial.com
> http://mailman.celestial.com/mailman/listinfo/filepro-list


5.0.6

# gpg --version
gpg (GnuPG) 1.4.0
Copyright (C) 2004 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA
Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512
Compression: Uncompressed, ZIP, ZLIB, BZIP2
# whence gpg
/usr/bin/gpg
# ls -l /usr/bin/gpg
lrwxrwxrwx   1 root     sys           38 Sep 13 22:35 /usr/bin/gpg -> 
/opt/K/SCO/gwxlibs/2.0.0Eb/usr/bin/gpg
#


So, just install gwxlibs 2.0.0Eb, which is a good idea anyways.
I beleive you have a script I wrote that makes this a one-step:
/setup_gnu 
ftp://ftp.sco.com/pub/openserver5/507/other/gwxlibs200Eb/gwxlibs200Eb_vol.tar

Though I'd read the readme from the same dir first and verify you have the 
prerequisites.
I think all you need besides the obvious rs506a I know you already have, is 
possibly you haven't yet installed oss646c over top of oss646b.

I'm building 1.4.2 now. Looks like the IDEA algorythm is in there just 
disabled in packages that are distributed free.
It built on 5.0.6 without a hitch, using gnutools 5.0.7Kg

# cd /usr/local/src
# wget -q -O - ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.tar.bz2 |bzcat 
|tar xvf -
# cd gnupg-1.4.2
# ./configure --help |less
# ./configure CFLAGS="-O2 -march=i686 -pipe"
# make
# make install

Just that easy.
And the result:

# /usr/local/bin/gpg --version
gpg (GnuPG) 1.4.2
Copyright (C) 2005 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.
Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA
Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512
Compression: Uncompressed, ZIP, ZLIB, BZIP2

The ./configure --help showed an options for disabling/enabling IDEA, but 
you don't have to use it, nor is using it enough.
You have to get idea.c you must get idea.c from someplace outside the reach 
of certain patent offices, and put it in the cipher directory
and then just configure again with no special options, it detects the 
presence of the file and uses it.

# cd cipher
# wget ftp://ftp.gnupg.dk/pub/contrib-dk/idea.c.gz
# gunzip idea.c.gz
# cd ..
# make clean
# ./configure CFLAGS="-O2 -march=i686 -pipe"
# make
# make install
# /usr/local/bin/gpg --version
gpg (GnuPG) 1.4.2
Copyright (C) 2005 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512
Compression: Uncompressed, ZIP, ZLIB, BZIP2
#

So you can just install gwxlibs 2.0.0Eb and get gpg 1.4.0 without idea, or 
it just about as easy to get the latest source and idea.c and get gpg 1.4.2 
with idea.
I guess I can't redistribute the binaries I just built that include idea, 
but I'll be happy to make a tar of 1.4.2 without idea, if for some reason 
you can't get it to build.

And idea only matters if the other end is even using it. They may not be 
even though their pgp includes it.

references:
http://mirrors.rootmode.com/www.gnupg.org/download/
http://ch.tudelft.nl/~arthur/gnupg-idea/

Brian K. White  --  brian at aljex.com  --  http://www.aljex.com/bkw/
+++++[>+++[>+++++>+++++++<<-]<-]>>+.>.+++++.+++++++.-.[>+<---]>++.
filePro  BBx    Linux  SCO  FreeBSD    #callahans  Satriani  Filk!