* change ringedit: - avoid all copy operations - delete for update by changing the packet type to a special unused packet. (export most know about this) - do an append instead of an update or insert - export may be used to compress a keyring. - keep track of all offset in the trustbd and index them by keyid. - If the lookup does not find a public key block at the stored offset disable this keyid. - If the keyid was not found or is disabled, walk thru the pubring. - use ftruncate to recover from keyring errors. maybe a new option to do this or simply mark the wrong part as unused. This makes signature checks and imports much faster; only keys given by a userid or a fingerprint (RSA only) have to walk tru the ring. * There is a new memory leak in update-trustdb * OpenBSD: dynamic loading with dlopen works on OpenBSD, but: OpenBSD binaries are a.out, so every symbol begins with "_" * use dld if we don't have dlopen. * should we flush the getkey.c caches while doing an import? * prefer a type 16 subkey for encryption because pgp cannot handle type 20. * calculation of marginals never yields a completely trusted key. * The critical bit of signature subpackets is not yet supported; i.e. it is ignored. * Exportable Certification Flag is ignored * write a tool to extract selected keys from a file. * new menu to delete signatures and list signature in menu * commandline controlled --edit-key with assumed save. * -rdynamic auf Solaris Problem * Replace the SIGUSR1 stuff by semaphores to avoid loss of a signal. * add test cases for invalid data (scrambled armor or other random data) * add some sanity checks to read_keyblock, so that we are sure that the minimal requirements are met (?) * decryption of message with multiple recipients does not work. * preferences of hash algorithms are not yet used. * rewrite --list-packets or put it into another tool. * Burn the buffers used by fopen(), or use read(2). Does this really make sense? * Change the buffering to a mbuf like scheme? Need it for PSST anyway. * add checking of armor trailers * remove all "Fixmes" * Change the internal represention of keyid into a struct which can also hold the localid and extend the localid to hold information of the subkey number because two subkeys may have the same keyid. * add an option to re-create a public key from a secret key; we can do this in trustdb.c:verify_own_keys. * OpenBSD has sometimes problems reading from /dev/random. * change the fake_data stuff to mpi_set_opaque * Is it okay to use gettext for the help system? * Add some stuff for DU cc * use "passphrase" instead of "pass phrase" * Use "user ID", "trustdb" and "WARNING".