// COMPLETE THREAD

gnutar + pgp filter mode

2 expanded posts ยท every known parent and child

NODE 9edeab81gnutar + pgp filter mode
-----BEGIN PGP SIGNED MESSAGE-----

The gnu tar archiver allows to use an arbitrary
compression program (option --use-compress-program=PROG).

This works well with pgp if a small wrapper is used:

#!/bin/csh -fb

if ("$1" == "-d") then
  exec pgp -d -f
else
  exec pgp -e -f
endif




The only problem is that this doesn't work well for
larger amounts of data, because pgp reads in all
data before starting with its work.


Perhaps a future release of pgp will have a real filter
mode.


Hadmut

BTW: Does this "crypto-hook" cause export restrictions to 
apply on gtar ?


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMV/0tmc1jG5vDiNxAQFtAAP/TMuYeYf5q7k1Y8DrBjb6XFKYYFANH3RH
FvThWq1BUgI+unH97EZkNkCzZJYT5qmLGk3+JLufCAw/o9YR7jKcldm2LNYJ96t2
BDcSGDF3qx/IUzQBa5NV+gUerNRVSwA3LzkTbXufOxYH0cB3KNcsx3B0bE1rEDa/
GCcJ1L6T+2s=
=FMiZ
-----END PGP SIGNATURE-----
NODE 37f7d150Re: gnutar + pgp filter mode
> The only problem is that this doesn't work well for
> larger amounts of data, because pgp reads in all
> data before starting with its work.
> 
> Perhaps a future release of pgp will have a real filter
> mode.

The problem is not with PGP but with the PGP message formatsa.  With
the current message formats you need to know the size of data before
you can output the header that precedes it.  As a result, whole
messages must somehow be buffered before PGP can output them.

The fix is to create new, one-pass packets, which will allow PGP to
generate messages in a single pass.  These new packet formats are
still in the design stage and will probably not be supported in PGP
3.0.

-derek