security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-01-08 12:44:23 +01:00
Code Activity

sm: Change default algos to SHA256 (CSR) and AES128 (bulk encryption).

Browse Source 
* sm/certreqgen.c (create_request): Change default hash algo.
* sm/gpgsm.c (main): Change default bulk cipher algo.
--

Signed-off-by: Werner Koch <wk@gnupg.org>
This commit is contained in:
Werner Koch 2015-03-25 10:12:11 +01:00
parent 0ed2cfcf05
commit bdf439035d
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sm/certreqgen.c
View File

@ -611,7 +611,7 @@ create_request (ctrl_t ctrl,
if (err) if (err)
return err; return err;
rc = gcry_md_open (&md, GCRY_MD_SHA1, 0); rc = gcry_md_open (&md, GCRY_MD_SHA256, 0);
if (rc) if (rc)
{ {
log_error ("md_open failed: %s\n", gpg_strerror (rc)); log_error ("md_open failed: %s\n", gpg_strerror (rc));

4
sm/gpgsm.c
View File

@ -931,7 +931,7 @@ main ( int argc, char **argv)
/* Note: If you change this default cipher algorithm , please /* Note: If you change this default cipher algorithm , please
remember to update the Gpgconflist entry as well. */ remember to update the Gpgconflist entry as well. */
opt.def_cipher_algoid = "3DES"; /*des-EDE3-CBC*/ opt.def_cipher_algoid = "AES";
opt.homedir = default_homedir (); opt.homedir = default_homedir ();
@ -1652,7 +1652,7 @@ main ( int argc, char **argv)
#ifndef HAVE_W32_SYSTEM #ifndef HAVE_W32_SYSTEM
printf ("prefer-system-dirmngr:%lu:\n", GC_OPT_FLAG_NONE); printf ("prefer-system-dirmngr:%lu:\n", GC_OPT_FLAG_NONE);
#endif #endif
printf ("cipher-algo:%lu:\"3DES:\n", GC_OPT_FLAG_DEFAULT); printf ("cipher-algo:%lu:\"AES:\n", GC_OPT_FLAG_DEFAULT);
printf ("p12-charset:%lu:\n", GC_OPT_FLAG_DEFAULT); printf ("p12-charset:%lu:\n", GC_OPT_FLAG_DEFAULT);
printf ("default-key:%lu:\n", GC_OPT_FLAG_DEFAULT); printf ("default-key:%lu:\n", GC_OPT_FLAG_DEFAULT);
printf ("encrypt-to:%lu:\n", GC_OPT_FLAG_DEFAULT); printf ("encrypt-to:%lu:\n", GC_OPT_FLAG_DEFAULT);