security-and-privacy/gnupg
security-and-privacy
/
gnupg
mirror of git://git.gnupg.org/gnupg.git
1
0
Fork 0
Code Releases Activity
3,827 Commits 100 Branches 301 Tags 233 MiB
Commit Graph

625 Commits

Author SHA1 Message Date
Werner Koch 2c79a2832c Add finger support to dirmngr. 
The basic network code from http.c is used for finger.  This keeps the
network related code at one place and we are able to use the somewhat
matured code form http.c.  Unfortunately I had to enhance the http
code for more robustness and probably introduced new bugs.

Test this code using

  gpg --fetch-key finger:wk@g10code.com

(I might be the last user of finger ;-)
 2011-02-08 21:11:19 +01:00
Werner Koch 8a7336e0bf Fix ECDSA 521 bit signing. 
This fix also allows the creation and use of an 521 bit ECDH key which
used to fail while creating the binding signature.
 2011-02-07 14:38:39 +01:00
Werner Koch cd9614b81b Removed deprecated SIGEXPIRED status line. 2011-02-04 10:28:28 +01:00
Werner Koch 9f38f3918a Fix test for gcry_pk_get_curve. 
Add a compatibility fixes for the non-curve case.
Remove -lber from the dirmngr link line.
 2011-02-03 22:04:31 +01:00
Werner Koch 5667e33290 Add a DECRYPTION_INFO status. 
DECRYPTION_INFO <mdc_method> <sym_algo>
        Print information about the symmetric encryption algorithm and
        the MDC method.  This will be emitted even if the decryption
        fails.
 2011-02-03 20:59:01 +01:00
Werner Koch 71e7a1644e Relax mailbox name checking. Fixes bug#1315. 2011-02-03 18:05:56 +01:00
Werner Koch d9e2dcc1a9 Extend algo selection menu. 
This allows to add an ECC key and to set the capabilities of an ECDSA
key.

Fix printing of the ECC algorithm when creating a signature.
 2011-02-03 17:40:43 +01:00
Werner Koch 0b5bcb40cf Finished ECC integration. 
Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo
the cleanups I did in the last week.  Adjusted my own ChangeLog
entries to be consistent with that entry.

Nuked quite some trailing spaces; again sorry for that, I will better
take care of not saving them in the future.  "git diff -b" is useful
to read the actual changes ;-).

The ECC-INTEGRATION-2-1 branch can be closed now.
 2011-02-03 16:35:33 +01:00
Werner Koch 20f429f735 Compute the fingerprint for ECDH only on demand. 
This also fixes a failed assertion when using a v3 key where the
fingerprint size is not 20.
 2011-02-02 17:40:32 +01:00
Werner Koch 4659c923a0 Sample ECC keys and message do now work. 
Import and export of secret keys does now work.  Encryption has been
fixed to be compatible with the sample messages.

This version tests for new Libgcrypt function and thus needs to be
build with a new Libgcrypt installed.
 2011-02-02 15:48:54 +01:00
Werner Koch e0d4139e19 Move OpenPGP OID helpers to common/. 
This is needed so that the agent will be able to export and import
OpenPGP secret keys.  Add test case.

Removed unused function.
 2011-01-31 18:19:14 +01:00
Werner Koch 328a642aa5 Fixed the ECC interface to Libgcrypt to be ABI compatible with the previous version. 
Quite some changes were needed but in the end we have less code than
before.  Instead of trying to do everything with MPIs and pass them
back and forth between Libgcrypt and GnuPG, we know use the
S-expression based interface and make heavy use of our opaque MPI
feature.

Encryption, decryption, signing and verification work with
self-generared keys.

Import and export does not yet work; thus it was not possible to check
the test keys at https://sites.google.com/site/brainhub/pgpecckeys .
 2011-01-31 15:44:24 +01:00
Werner Koch 0fb0bb8d9a Reworked the ECC changes to better fit into the Libgcrypt API. 
See ChangeLog for details.  Key generation, signing and verification works.
Encryption does not yet work.  Requires latest Libgcrypt changes.
 2011-01-31 09:27:06 +01:00
Werner Koch 358afc0dc8 Function name cleanups 
Also nuked some trailing spaces.
 2011-01-26 17:17:43 +01:00
Werner Koch d879c287ac Started with some code cleanups in ECDH. 
The goal is to have the ECDH code more uniform with the other
algorithms.  Also make error messages and variable names more similar
to other places.
 2011-01-25 20:28:25 +01:00
Werner Koch 302c5a826c More ECDH code cleanups 2011-01-25 17:48:51 +01:00
Werner Koch 638dca5dbc Editorial cleanups of keygen.c 
Also fixed a regression introduced by me in pubkey_enc.c.
Added extra checks.  Removed unused code.
 2011-01-25 16:54:18 +01:00
Werner Koch c5e8a4c0fd Merge branch 'master' into ECC-INTEGRATION-2-1 2011-01-24 12:24:11 +01:00
Werner Koch c3db7705c0 Truncate the DSA hash; fixes regression. 
Removed left over debug code.
 2011-01-21 15:58:07 +01:00
Werner Koch 27929981fc Make most of the selftests work. 
Note that there is still a problem with tests/openpgp/sigs.test while
using the option --digest-algo SHA256.
 2011-01-21 15:22:41 +01:00
Werner Koch 7f32d88ed1 All standard keyserver commands are now using dirmngr. 2011-01-20 14:12:53 +01:00
Werner Koch 357f8d5398 Keyserver search and get basically works again. 2011-01-18 12:51:16 +01:00
Werner Koch 8c8c45725f Initial code checking for backup - not yet working. 2011-01-10 14:30:17 +01:00
Werner Koch 3f659600c7 Change last change. Does now work. 2010-12-09 12:57:50 +00:00
Werner Koch 1486dec17b Change dirmngr timer under W32CE. 
Fix trustdb open problem under W32CE.
 2010-12-09 11:50:22 +00:00
Werner Koch fcb5f7d08f s/AES/AES128/ in diagnostics and --list-config 2010-12-02 15:49:02 +00:00
Werner Koch b3f9e2130e Change stack size for Wince. 
Allow for a longer agent atartup under wince.
Print gpg output via estream.
 2010-11-23 18:46:41 +00:00
Werner Koch 0103a53aa6 Smartcard related updates 2010-11-17 13:21:24 +00:00
David Shaw b4da5a4150 * pkclist.c (select_algo_from_prefs): Make sure the scores can't 
overflow when picking an algorithm (not a security issue since we
can't pick something not present in all preference lists, but we might
pick something that isn't scored first choice).

* pkclist.c (select_algo_from_prefs): Slightly improve the handling of
MD5 in preference lists.  Instead of replacing MD5 with SHA-1, just
remove MD5 from the list altogether, and let the next-highest ranked
algorithm be chosen.
 2010-10-29 19:49:54 +00:00
Werner Koch 2e82b095cd Better support unsigned time_t 2010-10-27 11:26:53 +00:00
Werner Koch 02e4c3cb7e Re-implemented GPG's --passwd command and improved it. 2010-10-26 09:10:29 +00:00
Werner Koch c212133918 Remove cruft. 
Make --gen-revoke work
 2010-10-21 10:25:03 +00:00
Werner Koch 25b1e76b44 Enable i18n for W32. 2010-10-20 15:06:50 +00:00
Werner Koch cc99c37549 Make public key data structure easier to read. 
Check vor v1 card while signing.
 2010-10-20 11:33:50 +00:00
Werner Koch ff59089979 replace some sprintf by bin2hex. 2010-10-18 13:54:42 +00:00
Werner Koch 6872919efe Fix a signing problem with the card 2010-10-18 12:59:19 +00:00
Werner Koch 764e88d4df All tests work are again working 2010-10-14 16:34:31 +00:00
Werner Koch 54591341a4 More agent support for gpg. 2010-10-13 15:57:08 +00:00
Werner Koch a78335c9ce Add new option --with-keygrip 2010-10-08 11:11:08 +00:00
Werner Koch 002b30e75c Import fixes. 
new otion for watchgnupg
 2010-10-06 11:29:10 +00:00
Werner Koch bfbd80feb9 Exporting secret keys via gpg-agent is now basically supported. 
A couple of forward ported changes.
Doc updates.
 2010-10-01 20:33:53 +00:00
David Shaw aeb31977ec * options.skel: Make the example for force-v3-sigs match reality (it 
has defaulted to off since 2007-10-25).
 2010-09-28 16:17:30 +00:00
Werner Koch 4fdd83b401 Fix standard directories for Wince. 
Typo fix.
 2010-09-13 10:17:04 +00:00
Werner Koch 299ed4c9e2 Removed more secret key related code. 
It builds fine and passes some of the tests but there are quite some
features which don't work yet.
 2010-09-06 19:57:42 +00:00
Werner Koch daab9aff3a Merge secret keys during import 2010-09-02 15:11:51 +00:00
Werner Koch a0b9ebfb7d Even less prompts for a new key now. 2010-09-01 12:49:05 +00:00
Werner Koch 9a9b3da58f Use passphrase caching for import and genkey. 2010-09-01 09:48:35 +00:00
Werner Koch 87fac99112 Import OpenPGP keys into the agent. 2010-08-31 15:58:39 +00:00
Werner Koch 34dde96669 Fix regression in logging. 
Add a registry key to enable catch-all remote debugging for W32.
Replace more stdio stuff by estream.
 2010-08-18 19:25:15 +00:00
Werner Koch a22c38baad Some work on the dirmngr 2010-07-23 16:16:14 +00:00