From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Daiki Ueno Newsgroups: gmane.emacs.bugs Subject: bug#15552: 24.3.50; epa-file-cache-passphrase-for-symmetric-encryption not respected with GnuPG 2.x Date: Wed, 09 Oct 2013 06:51:57 +0900 Message-ID: <87fvsbctxe.fsf-ueno@gnu.org> References: <87r4bx0xsk.fsf@flea.lifelogs.com> <87fvscwswx.fsf-ueno-ueno@gnu.org> <87hacsutvp.fsf-ueno@gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1381269189 20431 80.91.229.3 (8 Oct 2013 21:53:09 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 8 Oct 2013 21:53:09 +0000 (UTC) Cc: tzz@lifelogs.com, 15552@debbugs.gnu.org To: Stefan Monnier Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Tue Oct 08 23:53:11 2013 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VTfDL-0003d9-Ja for geb-bug-gnu-emacs@m.gmane.org; Tue, 08 Oct 2013 23:53:11 +0200 Original-Received: from localhost ([::1]:39156 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTfDL-0002If-9B for geb-bug-gnu-emacs@m.gmane.org; Tue, 08 Oct 2013 17:53:11 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:40392) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTfDH-0002IY-Hs for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 17:53:08 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VTfDC-0000lt-6v for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 17:53:07 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:55874) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTfDC-0000lp-3a for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 17:53:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1VTfDB-00043c-KN for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 17:53:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Daiki Ueno Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 08 Oct 2013 21:53:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 15552 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: notabug Original-Received: via spool by 15552-submit@debbugs.gnu.org id=B15552.138126912715528 (code B ref 15552); Tue, 08 Oct 2013 21:53:01 +0000 Original-Received: (at 15552) by debbugs.gnu.org; 8 Oct 2013 21:52:07 +0000 Original-Received: from localhost ([127.0.0.1]:35930 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VTfCI-00042M-Hq for submit@debbugs.gnu.org; Tue, 08 Oct 2013 17:52:06 -0400 Original-Received: from fencepost.gnu.org ([208.118.235.10]:38708) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VTfCG-00042B-AL for 15552@debbugs.gnu.org; Tue, 08 Oct 2013 17:52:04 -0400 Original-Received: from du-a.org ([2001:e41:db5e:fb14::1]:38484 helo=debian) by fencepost.gnu.org with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1VTfCF-0006ne-9z; Tue, 08 Oct 2013 17:52:03 -0400 In-Reply-To: (Stefan Monnier's message of "Tue, 08 Oct 2013 13:17:40 -0400") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:79065 Archived-At: Stefan Monnier writes: >>>>> 1. On the local system, install GnuPG 2.x and don't run the gpg-agent >>>>> 2. Set epa-file-cache-passphrase-for-symmetric-encryption to t >>>>> 3. Open file.gpg: password dialog pops up >>>>> 4. close file.gpg >>>>> 5. Open file.gpg: password dialog pops up again >>>>> Step (5) should not prompt. It works properly with GnuPG 1.x. > Still I'm confused: what kind of caching does > epa-file-cache-passphrase-for-symmetric-encryption offer, then? > From the docstring I got the impression that it would cache the > passphrase in Emacs's heap, so gpg's own caching should be largely > irrelevant (in the second session it will prompt for a password, which > Emacs should provide from its own cache without prompting the user). It used to work like that with gpg1. However, gpg2's implementation choice is that it does not leak the indication that gpg2 (actually gpg-agent) requires passphrase and it does not allow other tools than pinentry to inject passphrase. IMO that's a good idea for security (as pinentry uses secmem). > Stefan "Also confused about what "symmetric" has to do with it" Perhaps you could try the above recipe under gpg-agent is properly set up: $ echo abc > file $ gpg --symmetric file $ eval `gpg-agent --daemon` $ gpg2 < file.gpg $ gpg2 < file.gpg You won't be asked for the passphrase at the second time, because gpg-agent remembers passphrase based on the file content.