1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-22 10:19:57 +01:00

gpg: Avoid to emit a compliance mode line if libgcrypt is non-compliant.

* g10/encrypt.c (check_encryption_compliance): Check gcrypt compliance
before emitting an ENCRYPTION_COMPLIANCE_MODE status.
--

GnuPG-bug-id: 6221
Ported-from: 07c6743148d4abd30fb8bf08b07eb9755fdfff2d
This commit is contained in:
Werner Koch 2022-09-29 15:16:35 +02:00
parent 46f9b0071f
commit 2e22184ba5
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B

View File

@ -162,8 +162,13 @@ check_encryption_compliance (DEK *dek, pk_list_t pk_list)
goto leave; goto leave;
} }
compliant = gnupg_cipher_is_compliant (CO_DE_VS, dek->algo, /* From here on we only test for CO_DE_VS - if we ever want to
GCRY_CIPHER_MODE_CFB); * return other compliance mode values we need to change this to
* loop over all those values. */
compliant = gnupg_gcrypt_is_compliant (CO_DE_VS);
if (!gnupg_cipher_is_compliant (CO_DE_VS, dek->algo, GCRY_CIPHER_MODE_CFB))
compliant = 0;
for (pkr = pk_list; pkr; pkr = pkr->next) for (pkr = pk_list; pkr; pkr = pkr->next)
{ {