security-and-privacy/gnupg
security-and-privacy
/
gnupg
mirror of git://git.gnupg.org/gnupg.git
1
0
Fork 0
Code Releases Activity

gpg: For de-vs use AES-128 instead of 3DES as implicit preference. 

* g10/pkclist.c (select_algo_from_prefs): Change implicit cipher
algorithm.
--

Although 3DES is still a compliant algorithm, some other software does
not consider it has compliant but also does not set preference
accordingly.  Thus it is better to switch the implicit cipher algorithm
similar to what we already did with SHA-1.

Note that in GnuPG 2.3 3DES is already not anymore used here.

GnuPG-bug-id: 6063
This commit is contained in:
Werner Koch 2022-10-10 11:20:16 +02:00
parent 94092793f6
commit 5df1c247be
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
g10/pkclist.c
View File

@ -1479,8 +1479,16 @@ select_algo_from_prefs(PK_LIST pk_list, int preftype,
--pgp2 mode is on. This was a 2440 thing that was
dropped from 4880 but is still relevant to GPG's 1991
support. All this doesn't mean IDEA is actually
available, of course. */
implicit=CIPHER_ALGO_3DES;
available, of course.
Because "de-vs" compliance will soon not anymore allow
3DES it does not make sense to assign 3DES as implicit
algorithm. Instead it is better to use AES-128 as
implicit algorithm here. */
if (opt.compliance == CO_DE_VS)
implicit = CIPHER_ALGO_AES;
else
implicit=CIPHER_ALGO_3DES;
break;