51–54 of 54 posts
If people want a vanity short key ID, then educating them on how OpenPGP packets work, and how the fingerprint is generated from the timestamp is the right way to go. Teach a man to fish.
Here is some Java code that creates a partial collision on the fingerprint for the desired short key ID:
Earlier quoted context omitted.
it is time to move on, Opera 12 is not supported anymore and bound to be insecure sooner than later. This problem will be a cipher issue.
It is, but I can't be bothered to try making Chrome or Firefox match my needs, if they even can.
Earlier quoted context omitted.
Is there a technical way to implement a service like that in a non-compromising way? I.e. user sends you his public key, you brute-force some nonce value, until the key's ID is "nice"? Non-native speaker here, I didn't even know what "vanity" means, just ignored it as noise-word :) Well, after looking it up, I still am not sure that I understand what it means :).
vanity base word is vane; or to be so focused on how pretty or appealling you are to others. often used when talking about asthetically pleasing names when talking about tech stuff (vanity hostnames for example.. dns names which are excessively showy, this used to be common on IRC to look "cool").
http://lists.gnupg.org/pipermail/gnupg-users/2015-January/05...
"I have not heard about it but given that the Wau Holland Stiftung is collecting GnuPG donations also via Bitcoin, it is likely that this can't be tracked.
However, if that processing power is used to find many dups for long keyids we will sooner or later neet to invest work to mitigate the effect of this (e.g. adding a fingerprint as signed attribute to each signature)."