PGP Keyservers and 5.0 DSS/D-H Keys...

Hi Guys (F/M),

Just a quick question.

Are the current (mostly PGP 2.6.x based) keyservers able to incorporate,
store and provide the new PGP  5.0 based DSS/Diffie-Hellman keys? And if
not how can  one publish (the public  part of) such a  key using nothing
more than email or a web-browser behind a firewall that does not allow a
direct connection to a keyserver on port 11371?

Ciao,
Unicorn.
-- 
======= _ __,;;;/ TimeWaster ================================================
     ,;( )_, )~\| A Truly Wise Man Never Plays   PGP: 64 07 5D 4C 3F 81 22 73
    ;; //  `--;     Leapfrog With a Unicorn...        52 9D 87 08 51 AA 35 F0
==='= ;\ = | ==== Youth is not a time in life, it's a State of Mind! ========

-----BEGIN PGP SIGNED MESSAGE-----

In <19970903182604.17756@sequent.com>, on 09/03/97 
   at 06:26 PM, Unicorn <hvdl@sequent.com> said:

>Just a quick question.

>Are the current (mostly PGP 2.6.x based) keyservers able to incorporate,
>store and provide the new PGP  5.0 based DSS/Diffie-Hellman keys? And if
>not how can  one publish (the public  part of) such a  key using nothing
>more than email or a web-browser behind a firewall that does not allow a
>direct connection to a keyserver on port 11371?

All of the PGP public keyservers accept keys & keyrequests by e-mail.

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://www.amaranth.com/~whgiii
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html                        
- ---------------------------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a
Charset: cp850
Comment: Registered_User_E-Secure_v1.1b1_ES000000

iQCVAwUBNA2ItI9Co1n+aLhhAQGamwP9GSRL7Z5iVfRydlK4Or+bDS4BRij9oC6g
AhlZBVhT8iqT4Kp4C2ConIiTHYaz1B/oI4FZzSf2+F1r0sT8Q1mmfkuKmzYOsJCT
ZFyZrWeSpNnbN97s/fGHTz5ranhbLZ/EHj56GqeDtZbZ7c00KLAj170N2FmiK9TH
bdjbFkzSDZU=
=QhiD
-----END PGP SIGNATURE-----

At 06:26 PM 9/3/97 +0200, Unicorn wrote:
>Are the current (mostly PGP 2.6.x based) keyservers able to incorporate,
>store and provide the new PGP  5.0 based DSS/Diffie-Hellman keys? And if
>not how can  one publish (the public  part of) such a  key using nothing
>more than email or a web-browser behind a firewall that does not allow a
>direct connection to a keyserver on port 11371?

Part of your answer is that the 2.6.x servers, once modified, will handle
5.0 keys.

We have a keyserver running at keys.efga.org that handles the 2.6.x and the
5.0 keys.  Right now I think we only support the PGP5.0 HTML based
interface that operates on port 11371.  I don't think we implemented web
based or email based key submission.  This would be trivial to add, we just
didn't do it.


  -- Robert Costner                  Phone: (770) 512-8746
     Electronic Frontiers Georgia    mailto:pooh@efga.org  
     http://www.efga.org/            run PGP 5.0 for my public key

There are 2 main flavors of pgp key servers, AND 2 main flavors
of pgp.  One keyserver (the Graff keyserver) uses perl + a pgp
binary to manage keys.  This has both a mail & web interface
available for it.  The other keyserver (the Horowitz keyserver)
uses its own data management routines to manage keys & is independent
of a pgp binary (which raises some integrity issues, but is
a big win).  It has a mail interface & runs a server interface
on a preselected unprivileged port.  The newer version (0.9,2) of the
Horowitz server is compatible with the new formats of the pgp 5.0
"packets".

The 2 main flavors of pgp, or pgp binaries, are 2.6.x based,
the old public available version that everyone has, & the new
pgp 5.x version that's just been released by pgp, inc.  A
windows binary is available from the company & a public release
of the source is available & is being worked on.

To address the specific question, the 2.6.x pgp binaries cannot
understand the new pgp 5.0 keys.  They can understand pgp 5.0 keys
if pgp 5.0 has chosen to make rsa-style keys.  So keyservers running
the Graff server using pgp 2.6x binary will reject or ignore new
style pgp keys.  It was a frequent poster to this list, whose 
"add" transaction bounced on ESnet's keyserver, that alerted me to the
appearance of  a beta version of the pgp 5.0 product early this spring.

There are also hybrid key servers; people who use features of both
the Horowitz & Graff key servers.  It appears to me that they mostly
use the pgp binary to get check the cryptographic integrity of
submitted keys.

If you want to read about keyservers, check
http://www-swiss.ai.mit.edu/~bal/pks-faq.html
as well as the pgp pages at mit & pgp.net
If you want to read about the pgp 5.0 effort,
http://www.ifi.uio.no/pgp/

There are also keyserver variants & historical versions of pgp of course.

The Horowitz server & the pgp 5.0 source are both very new.