From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.bugs Subject: bug#15552: 24.3.50; epa-file-cache-passphrase-for-symmetric-encryption not respected with GnuPG 2.x Date: Tue, 08 Oct 2013 23:01:58 -0400 Message-ID: References: <87r4bx0xsk.fsf@flea.lifelogs.com> <87fvscwswx.fsf-ueno-ueno@gnu.org> <87hacsutvp.fsf-ueno@gnu.org> <87fvsbctxe.fsf-ueno@gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1381287798 9974 80.91.229.3 (9 Oct 2013 03:03:18 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 9 Oct 2013 03:03:18 +0000 (UTC) Cc: tzz@lifelogs.com, 15552@debbugs.gnu.org To: Daiki Ueno Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Wed Oct 09 05:03:21 2013 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VTk3V-0000VC-4l for geb-bug-gnu-emacs@m.gmane.org; Wed, 09 Oct 2013 05:03:21 +0200 Original-Received: from localhost ([::1]:39963 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTk3U-0001dZ-Ck for geb-bug-gnu-emacs@m.gmane.org; Tue, 08 Oct 2013 23:03:20 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:40026) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTk3K-0001dD-DQ for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 23:03:17 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VTk3D-0005aG-0a for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 23:03:10 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:56268) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTk3C-0005aA-Tr for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 23:03:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1VTk3C-00035o-6L for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 23:03:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Stefan Monnier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 09 Oct 2013 03:03:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 15552 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: notabug Original-Received: via spool by 15552-submit@debbugs.gnu.org id=B15552.138128772211802 (code B ref 15552); Wed, 09 Oct 2013 03:03:02 +0000 Original-Received: (at 15552) by debbugs.gnu.org; 9 Oct 2013 03:02:02 +0000 Original-Received: from localhost ([127.0.0.1]:36326 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VTk2D-00034B-Bi for submit@debbugs.gnu.org; Tue, 08 Oct 2013 23:02:01 -0400 Original-Received: from ironport2-out.teksavvy.com ([206.248.154.182]:48772) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VTk2B-000343-F0 for 15552@debbugs.gnu.org; Tue, 08 Oct 2013 23:01:59 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EABK/CFHO+K8t/2dsb2JhbABEuzWDWRdzgh4BAQQBViMFCwswBAcLFBgNJIgeBrEfkA6NY4MnA6R6gV6DEw X-IPAS-Result: Av8EABK/CFHO+K8t/2dsb2JhbABEuzWDWRdzgh4BAQQBViMFCwswBAcLFBgNJIgeBrEfkA6NY4MnA6R6gV6DEw X-IronPort-AV: E=Sophos;i="4.84,565,1355115600"; d="scan'208";a="35077048" Original-Received: from 206-248-175-45.dsl.teksavvy.com (HELO fmsmemgm.homelinux.net) ([206.248.175.45]) by ironport2-out.teksavvy.com with ESMTP/TLS/ADH-AES256-SHA; 08 Oct 2013 22:58:16 -0400 Original-Received: by fmsmemgm.homelinux.net (Postfix, from userid 20848) id 9ADA7AE215; Tue, 8 Oct 2013 23:01:58 -0400 (EDT) In-Reply-To: <87fvsbctxe.fsf-ueno@gnu.org> (Daiki Ueno's message of "Wed, 09 Oct 2013 06:51:57 +0900") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3.50 (gnu/linux) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:79073 Archived-At: > It used to work like that with gpg1. However, gpg2's implementation > choice is that it does not leak the indication that gpg2 (actually > gpg-agent) requires passphrase and it does not allow other tools than > pinentry to inject passphrase. IOW epa-file-cache-passphrase-for-symmetric-encryption only works for gpg1 and not for gpg2? > IMO that's a good idea for security (as pinentry uses secmem). There are many situations where local security is not nearly as important as convenience. But IIUC with gpg2 the general answer is "use gpg-agent to do the caching", and it's supposed to work fine (i.e. it's just as convenient as caching the password in Emacs). >> Stefan "Also confused about what "symmetric" has to do with it" > Perhaps you could try the above recipe under gpg-agent is properly set up: > $ echo abc > file > $ gpg --symmetric file > $ eval `gpg-agent --daemon` > $ gpg2 < file.gpg > $ gpg2 < file.gpg > You won't be asked for the passphrase at the second time, because > gpg-agent remembers passphrase based on the file content. That doesn't really explain to me why epa-file-cache-passphrase-for-symmetric-encryption has "symmetric" in its name and more specifically why caching of passphrases would be different for symmetric than for public key cryptography. Stefan