Need IDEA plugin for gpg

[prn]

Hi folks,

Using Centos 5.6. I need to decrypt messages created by PGP 4.0 for MVS.

The messages are encrypted using IDEA for the symmetric cypher. Right now, I'm using gpg on Windows, but it looks like I'm finally going to be permitted to move that process to Linux.

The problem is that the GPG FAQ at http://www.gnupg.org/faq/GnuPG-FAQ.html#how-do-i-include-support-for-rsa-and-idea says the source for the IDEA plugin is "available from ftp://ftp.gnupg.dk/pub/contrib-dk/." Unfortunately, although ftp.gnupg.dk exists, there is no /pub/contrib-dk directory anymore. I can connect anonymously to the site, and can cd to /pub, but get told that there is no such directory when I try to cd to /pub/contrib-dk. And the site will not allow ls at all.

So, does anyone know if there is a mirror of the gnupg.dk site? Has the IDEA support moved elsewhere? I really don't want to leave this on windows if I can avoid it.

Thanks,
Paul

[prn]

The problem was that I was not getting the ftp site linked from the gnupg.org page ( ftp.gnupg,dk ) to work. I could not either ls or cd to pub/contrib-dk.

It turns out, however, that their webserver seems to work somewhat better than their ftp server. For the benefit of anyone else looking for the same files, here's the steps that eventually acquired (and proved) a good file:

wget http://www.gnupg.dk/contrib-dk/idea.c.gz
wget http://www.gnupg.dk/contrib-dk/idea.c.gz.sig
gpg --keyserver pgp.mit.edu --recv-keys 621CC013
gpg --verify idea.c.gz.sig
 

The key used for the detached sig is expired, but the result at least shows

# gpg --verify idea.c.gz.sig
gpg: Signature made Tue 01 Apr 2003 10:32:20 AM EST using DSA key ID 621CC013
gpg: Good signature from "Werner Koch <[e-mail]>"
gpg:                 aka "Werner Koch <[e-mail]>"
gpg:                 aka "Werner Koch <[e-mail]>"
gpg: Note: This key has expired!
Primary key fingerprint: ECAF 7590 EB34 43B5 C7CF  3ACB 6C7E E1B8 621C C013
 

The IDEA code is pretty old by now and even with the patent having expired, it's not the best choice, but I have no choice. The sender is the 800-pound gorilla and I'm a relative gnat. I have to be able to decrypt the files from this provider. They don't particularly have to accommodate me.

Thanks,
Paul