choice of encryption algorithms

David Shaw dshaw at jabberwocky.com
Thu Jun 21 18:54:06 CEST 2012


On Jun 21, 2012, at 12:39 PM, Daniel Kahn Gillmor wrote:

> On 06/21/2012 12:52 AM, Robert J. Hansen wrote:
>> Please don't do this.  It's error-prone.  Those are machine-readable
>> numbers, not human-readable ones.  Use the human-readable ones: for
>> instance,
>> 
>> default-preference-list TWOFISH 3DES SHA256 SHA224 RIPEMD160
> 
> completely agreed.
> 
>> Also, default-preference-list is redundant with the other -preferences.
> 
> i don't think this is the case.  default-preference-list describes the
> default preferences used for new keys.  That is, for keys created by the
> local installation of gpg, the embedded preference list stored in the
> self-sig is chosen by this value.

You are correct.  default-preference-list is to give the, well, default preference list for new keys or the list that is set when you do "updpref" in --edit-key and don't give an explicit list.

David




More information about the Gnupg-users mailing list