security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-02 22:46:30 +02:00
Code Activity

Allow generation of card keys up to 4096 bit.

Browse source 
This patch implementes a chunk mode to pass the key parameters from
scdaemon to gpg.  This allows to pass arbitrary long key paremeters;
it is used for keys larger than 3072 bit.

Note: the card key generation in gpg is currently broken.  The keys
are generated but it is not possible to create the self-signature
because at that time the gpg-agent does not yet know about the new
keys and thus can't divert the sign request to the card.  We either
need to run the learn command right after calling agent_scd_genkey or
implement a way to sign using the currently inserted card.  Another
option would be to get rid of agent_scd_genkey and implement the
feature directly in agent_genkey.
This commit is contained in:
Werner Koch 2011-06-16 14:27:33 +02:00
parent 328ac58962
commit 37228cfa05
7 changed files with 117 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

2
g10/card-util.c
View file

@ -1294,7 +1294,7 @@ static unsigned int
ask_card_keysize (int keyno, unsigned int nbits)
{
unsigned int min_nbits = 1024;
unsigned int max_nbits = 3072; /* GnuPG limit due to Assuan. */
unsigned int max_nbits = 4096;
char *prompt, *answer;
unsigned int req_nbits;