decrypt : primary key or subkey ?

Charly Avital shavital at mac.com
Thu Jun 7 17:32:08 CEST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Bruno Costacurta wrote the following on 6/7/07 1:31 PM:
[...]

> 
> Hello David,
> 
> (note: I'm able to revoke this subkey (done but not sent to keyserver yet)).
> 
>[...]

Bruno,

I have just downloaded (again) your key now, and it looks like:

pub  1024D/2E604D51  created: 2006-06-11  expires: never       usage: SC
                     trust: unknown       validity: unknown
This key was revoked on 2007-06-07 by DSA key 2E604D51 Bruno Costacurta
<bruno at costacurta.org>
sub  2048g/0CC897B5  created: 2006-06-11  revoked: 2007-06-07  usage: E
[ unknown] (1). Bruno Costacurta <bruno at costacurta.org>
[ revoked] (2)  pubmb01 <pubmb01 at skynet.be>
[ revoked] (3)  pubmb02 <pubmb02 at skynet.be>
[ revoked] (4)  Bruno Costacurta <cob1 at biz.tiscali.be>
[ unknown] (5)  Bruno Costacurta <pubmb01 at skynet.be>
[ unknown] (6)  Bruno Costacurta <contract at costacurta.org>

It would seem that you have revoked both the primary key and the subkey.

I *believe*, but I am not sure, that you could have revoked *only* the
subkey, and generated a new subkey in its stead. That would have kept
your primary key "alive", with a new subkey, hopefully valid for
encryption to you.

I might be wrong, but I believe that in the present situation,
generating a new E subkey will not resuscitate your primary key.

I hope you get more definite opinions from other forum subscribers.

Regards,
Charly





-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (Darwin)
Comment: GnuPG for Privacy
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEVAwUBRmgk9M3GMi2FW4PvAQhXJAgAsIzxvD3mn3+kxKUUQsGqkLdGBi19lIhW
cWORBVMiIbG2XfRGcErIKdrsJ8yz3VNOWCdv7jPLCbCRJcow6HQcD+h+Rh1zdDtZ
Hs7RstoLGP4+7rCCPkFtCmiIHA1VC/vN7PZ+6HKbMzxqbHAKIUnmkoFvPvod1fkB
a6fgZbNcD/Yimz0cLognDRem9wBV/zPCcuutlgqIO7faCzrcMsub/Uz+OGwzsIi5
elGvcQm/c2Vx46C85IUzm8V1goE4RGSc5CDmwOHhOLkd76Oim/kS1Xwk0u6LmbOI
6E1C4aHb7ikL7YLkTKpDcn5exwNnKFWVbzhagahW7dB9RmcnMB0XeA==
=FXjD
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list