Problem receiving encrypted data by email (Page 1 of 2)

Because  in my University Final Project, one function is send several emails, with diferent data encrypted (diferent fields in Database, all of them encrypted), and I'm thinking use FireGPG in my presentation. But, if this happen I cannot do that...

Unless you implement that until 1 July :]

Last edited by machado (2009-06-15 12:07:11)

Unfortunately, that's not an option for me... I work with students marks, so each one is encrypted, and each one has a digital signing. And that's  the objective, so I cant do another way..

It's not strange behaviour. It's perfectly possible to receive an Email with different parts encrypted. See: if someone has some data encrypted with two public key, and another one encrypted also with two encrypted key (but one of them the same), someone might want to send it, so the person who receives it, decrypt the two parts with the private key.

Its perfectly possible

Last edited by machado (2009-06-15 13:26:22)

What I do is:

key A- student Key; B- teacher; Key C - another Teacher key; key D - another
Block A,B and C, are all stored encrypted in Database, and signed by teacher (when student access web application, he can see the validation of the mark, but thats another talk :] )

[Block A, key A,key B]
[Block B, key A,key C]
[Block C, key A,key D]
...
and so on

So, in just one e-mail, student have all the information he needs, and I sent it for thousand of students. If I can send 300 emails, I will not send 900

For sure I cant send you an email sample, some parts are in Portuguese:

Nota 1: Mark 1
Exame -> First exam
Assinatura digital -> digital signature

I will send to  you the email, but if you provide me an email address, I send to you public and private key, I'm using for testing.

Last edited by machado (2009-06-15 13:59:42)

I dont know if I'm answering your question, but I'm using the package Crypt GPG to use with PHP.

A with? Sorry, I did not understood.

Two methods? How do I do that?

You do not understood me. I do not the those emails form gmail or another email service. I use a "private" SMTP server, and those emails are sent from my Web application, and the body of those messages are result of query's (data extracted from Database).

I just use Gmail to receive

I really dont know if its openpgp or inline as you asked, but Im almost sure its openPGP
http://pear.php.net/package/Crypt_GPG/

But why are you asking ?

Many sorry, I thougth once this original thread was to report a bug (and as you well say, its not a bug), I thought that I should create a new one. Sorry if I did that wrong.

Ok, answering your question, Crypt_GPG supports input and output in OpenPGP ascii-armored or binary form.

For signatures, clearsign, detached sign and normal signing are all available.

Last edited by machado (2009-06-17 02:57:28)

How can I do that exactly?

Well, an email from my web application, the body (encrypted) has around 1600 chars. The same email (same body) encrypted in Gmail with the same public key and sent with and without Inline has around 1000 chars. With Inline, and with my web application, there's no attachments.

Sorry but I do not have suficient knowledge do know how to exactly answer your question.

Based on this info, I can only assume that my emails use OpenPGP protocol, without Inline option.

EDIT: ok I understand now. You just want to know if its PGP/MIME or PGP/Inline Well, as I said, I'm almost sure its Mime, but I will confirm that.

EDIT: Its not MIME, its Inline Confirmed My emails doesnt have signatures on attachments, they are on the body of email, so its Inline for sure.

Now I hope have answered you question. Finally :]

Last edited by machado (2009-06-17 16:44:25)

Unfortunately, I have a "real" bug (i dont know if its from FireGPG, Firefox or another), when I press right click the usual menu does not open (it happens only on Gmail), so I have to select all the area, EDIT-Copy and then Tools-FireGPG-Text Editor, and then Paste and Decrypt. As you can see, its a little bit annoying do that a lot of times

However, its always more efficient have all the parts decrypted automatically. I hope you can do some work on that

Last edited by machado (2009-06-17 16:53:31)