Werner Koch 03f0b51fe4 gpg: Limit keysize for unattended key generation to useful values. ...

* g10/keygen.c (gen_elg): Enforce keysize 1024 to 4096.
(gen_rsa): Enforce keysize 1024 to 4096.
(gen_dsa): Enforce keysize 768 to 3072.
--

It was possible to create 16k RSA keys in batch mode. In addition to the
silliness of such keys, they have the major drawback that under GnuPG
and Libgcrypt, with their limited amount of specially secured memory
areas, the use of such keys may lead to an "out of secure memory"
condition.

2014-06-26 21:53:38 +02:00

..

armor.c

gpg: Change armor Version header to emit only the major version.

2013-11-27 09:20:02 +01:00

build-packet.c

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

call-agent.c

gpg: Fix a couple of spelling errors

2014-06-17 11:42:39 +02:00

call-agent.h

gpg: Re-enable secret key deletion.

2014-04-15 19:44:50 +02:00

call-dirmngr.c

Use "samethread" mode keyword for some es_fopenmem.

2014-05-06 09:49:26 +02:00

call-dirmngr.h

gpg: Print the actual used keyserver address.

2014-03-14 16:12:54 +01:00

card-util.c

gpg: Allow key-to-card upload for cert-only keys

2014-06-25 09:21:32 +02:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

cipher.c

Replace gcry_md_start_debug by gcry_md_debug.

2011-09-20 09:54:27 +02:00

comment.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

compress-bz2.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

compress.c

gpg: Avoid infinite loop in uncompressing garbled packets.

2014-06-20 10:41:38 +02:00

cpr.c

gpg: Start using OpenPGP digest algo ids.

2014-01-31 15:33:03 +01:00

dearmor.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

decrypt-data.c

gpg: Remove useless diagnostic in MDC verification.

2014-05-14 08:56:39 +02:00

decrypt.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

dek.h

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

delkey.c

gpg: Re-enable secret key deletion.

2014-04-15 19:44:50 +02:00

ecdh.c

gpg: Use only OpenPGP cipher algo ids.

2014-01-31 14:35:49 +01:00

encrypt.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

exec.c

w32: Include winsock2.h to silence warnings.

2014-03-07 14:18:43 +01:00

exec.h

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

export.c

gpg: Make export of ECC keys work again.

2014-06-20 14:54:01 +02:00

filter.h

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

free-packet.c

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

getkey.c

gpg: Fix bug parsing a zero length user id.

2014-06-02 11:47:25 +02:00

gpg-w32info.rc

w32: Add icons and version information.

2013-05-07 21:35:48 +02:00

gpg.c

gpg,gpgsm: Simplify wrong_args function.

2014-06-26 17:07:47 +02:00

gpg.h

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

gpgv.c

gpgv: Init Libgcrypt to avoid syslog warning.

2014-03-07 09:58:22 +01:00

helptext.c

Change all quotes in strings and comments to the new GNU standard.

2012-06-05 19:29:22 +02:00

import.c

gpg: Auto-migrate existing secring.gpg.

2014-06-05 11:19:59 +02:00

kbnode.c

Fix minor compiler warnings.

2013-11-15 15:49:34 +01:00

keydb.c

gpg: Fix uninitialized access to search descindex with gpg keyboxes.

2014-05-14 18:13:11 +02:00

keydb.h

gpg: Re-enable secret key deletion.

2014-04-15 19:44:50 +02:00

keyedit.c

Make more use of *_NAME macros.

2014-05-08 10:28:23 +02:00

keygen.c

gpg: Limit keysize for unattended key generation to useful values.

2014-06-26 21:53:38 +02:00

keyid.c

gpg: Avoid NULL-deref in default key listing.

2014-06-02 19:54:22 +02:00

keylist.c

Add new option --with-secret.

2014-06-03 21:35:59 +02:00

keyring.c

Make use of the *_NAME etc macros.

2013-11-18 14:09:47 +01:00

keyring.h

Decryption and signi via agent is now implemented.

2010-04-23 11:36:59 +00:00

keyserver-internal.h

Initial code checking for backup - not yet working.

2011-01-10 14:30:17 +01:00

keyserver.c

gpg: Make --auto-key-locate work again with keyservers.

2014-03-17 15:39:33 +01:00

main.h

gpg: Auto-migrate existing secring.gpg.

2014-06-05 11:19:59 +02:00

mainproc.c

gpg: Simplify default key listing.

2014-06-02 19:50:18 +02:00

Makefile.am

gpg: Auto-migrate existing secring.gpg.

2014-06-05 11:19:59 +02:00

mdfilter.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

migrate.c

gpg: Auto-migrate existing secring.gpg.

2014-06-05 11:19:59 +02:00

misc.c

gpg: Avoid NULL-deref in default key listing.

2014-06-02 19:54:22 +02:00

openfile.c

Make use of the *_NAME etc macros.

2013-11-18 14:09:47 +01:00

OPTIONS

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

options.h

Add new option --with-secret.

2014-06-03 21:35:59 +02:00

options.skel

gpg: Remove legacy keyserver examples from the template conf file.

2014-03-07 09:53:29 +01:00

packet.h

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

parse-packet.c

gpg: Improve the output of --list-packets

2014-06-12 14:41:40 +02:00

passphrase.c

gpg: Re-enable secret key deletion.

2014-04-15 19:44:50 +02:00

photoid.c

gpg: New %U expando for the photo viewer.

2014-04-17 21:44:09 +02:00

photoid.h

Decryption and signi via agent is now implemented.

2010-04-23 11:36:59 +00:00

pkclist.c

gpg: Use more specific reason codes for INV_RECP.

2014-06-10 14:54:55 +02:00

pkglue.c

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

pkglue.h

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

plaintext.c

Change all quotes in strings and comments to the new GNU standard.

2012-06-05 19:29:22 +02:00

progress.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

pubkey-enc.c

ECC Fixes.

2014-04-28 10:36:16 +09:00

pubring.asc

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

revoke.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

rmd160.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

rmd160.h

Add missing header file.

2008-12-12 08:54:50 +00:00

seckey-cert.c

Add tweaks for the not anymore patented IDEA algorithm.

2012-05-08 18:18:32 +02:00

server.c

Silence several warnings when building under Windows.

2014-03-07 16:06:35 +01:00

seskey.c

gpg: Use only OpenPGP public key algo ids and add the EdDSA algo id.

2014-01-30 18:48:37 +01:00

sig-check.c

gpg: Reject signatures made with MD5.

2014-03-17 18:14:23 +01:00

sign.c

gpg: Change pinentry prompt to talk about "secret key".

2014-04-15 19:29:57 +02:00

signal.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

skclist.c

gpg: Remove cipher.h and put algo ids into a common file.

2014-01-29 20:35:05 +01:00

t-rmd160.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

tdbdump.c

Change all quotes in strings and comments to the new GNU standard.

2012-06-05 19:29:22 +02:00

tdbio.c

Silence more warnings about unused vars and args.

2014-03-07 19:05:41 +01:00

tdbio.h

gpg: Do not require a trustdb with --always-trust.

2014-03-07 10:44:27 +01:00

textfilter.c

Started to implement the audit log feature.

2007-11-19 16:03:50 +00:00

trust.c

Fix g10/trust.c.

2014-03-06 16:23:10 +09:00

trustdb.c

w32: Silence warnings about unused vars.

2014-03-07 16:11:15 +01:00

trustdb.h

gpg: Allow building without any trust model support.

2014-02-10 17:46:40 +01:00

verify.c

Change all quotes in strings and comments to the new GNU standard.

2012-06-05 19:29:22 +02:00

zlib-riscos.h

include: Remove this directory.

2014-01-29 17:45:05 +01:00