🚀 go-pugleaf

pcl@ox.ac.uk (Paul C Leyland) writes:


>The following request might sound sacrilegious to some, but please
>bear with me.

>I wish to use PGP as a filter on the input and/or output of daemons.
>I assume that the daemons are running on physically secure machines
>running trusted software and with only trusted users logged into them.
>However, I *cannot* assume that the network joining the machines is in
>any way secure.  What I can do is to include timestamps within the
>plaintext (to hinder playback attacks); encrypt it (to foil snoopers);
>checksum it (to prevent in-flight modification) and sign it (to stop
>spoofers).  PGP allows me to do the hard bits of this without me
>writing any fresh code.

>I like PGP as an encryption service, but what I can't abide is its
>incessant chattiness.   .....

At least the encryption part of it is quite possible with the vanilla
version of PGP2.1 as compiled fresh after an FTP from one of those sites
that carry it. I had the requirement of encrypting COPS reports sent
via e-mail to me from various machines (just because COPS reports may
contain info useful to a would-be attacker) and in the cops script
I did something like this:

       cat $REPORT | pgp -eaf $USER_PUBKEY | mailx -s"cops report" $USER

Too simple or am i missing something ?

Hope this helps unless I have completely misunderstood your requirements.


-- 
== Alex Bottonelli / Bull Italia BSP  | FAX  : +39-(0)2-6779/8463           ==
== I.S./W.S./Network Security Officer | PHONE: +39-(0)2-6779/8324           ==
== E-MAIL: A.Bottonelli@it12.bull.it  | (BullCom users dial 260+extension)  ==
== BULLTX: /BULLX/IT12X/BOTTONELLI A. | PGP Public Key available on request ==