Werner Koch
4c181d51a6
gpg: Do not use weak digest algos if selected by recipient prefs. ...
* g10/misc.c (is_weak_digest): New.
(print_digest_algo_note): Use it here.
* g10/sig-check.c (check_signature_end_simple): Use it.
* g10/sign.c (hash_for): Do not use recipient_digest_algo if it is in
the least of weak digest algorithm.
--
If a message is signed and encrypted to several recipients, the to be
used digest algorithm is deduced from the preferences of the
recipient. This is so that all recipients are able to check the the
signature. However, if the sender has a declared an algorithm as
week, that algorithm shall not be used - in this case we fallback to
the standard way of selecting an algorithm.
Note that a smarter way of selecting the algo is to check this while
figuring out the algorithm - this needs more testing and thus we do it
the simple way.
Reported-by: Phil Pennock
Signed-off-by: Werner Koch <wk@gnupg.org>
Backported-from-master: 15746d60d492f5792e4a179ab0a08801b4049695
2020-11-02 17:48:02 +01:00
2017-05-11 18:12:37 +02:00
2019-05-14 11:24:35 +09:00
2019-05-21 16:28:11 +02:00
2020-08-23 12:31:18 +02:00
2020-08-23 12:31:18 +02:00
2019-12-07 11:56:13 +01:00
2017-07-24 20:09:52 +02:00
2020-04-15 15:18:41 +02:00
2016-11-02 12:53:58 +01:00
2018-05-31 12:08:22 +02:00
2017-04-11 13:52:19 +09:00
2018-05-02 20:15:10 +02:00
2019-06-23 20:17:47 -04:00
2017-08-01 19:08:16 +02:00
2020-05-12 18:51:47 +02:00
2019-05-17 13:42:42 +02:00
2020-04-16 08:25:55 +02:00
2020-03-18 15:26:43 +01:00
2020-08-24 19:48:13 +02:00
2020-05-12 18:51:47 +02:00
2020-07-07 13:03:01 +02:00
2019-05-17 12:46:16 +02:00
2016-11-05 12:02:19 +01:00
2020-07-16 11:38:40 +02:00
2018-05-02 20:15:10 +02:00
2017-07-21 17:49:10 +02:00
2020-09-03 17:06:29 +02:00
2015-02-04 09:15:34 +01:00
2020-10-28 18:10:01 +01:00
2018-03-08 14:08:51 +09:00
2020-10-02 17:04:12 +02:00
2020-02-10 16:37:34 +01:00
2017-03-07 20:25:54 +09:00
2016-11-05 12:02:19 +01:00
2020-10-02 17:04:12 +02:00
2020-03-14 19:53:40 +01:00
2020-10-02 17:04:12 +02:00
2017-03-07 20:25:54 +09:00
2020-08-23 12:31:18 +02:00
2019-03-18 13:16:35 +01:00
2020-09-02 16:06:46 +02:00
2017-07-27 11:38:57 +02:00
2018-07-09 12:07:24 +02:00
2018-07-09 10:25:06 +02:00
2020-10-26 12:36:38 +01:00
2020-03-14 19:53:40 +01:00
2020-10-30 15:52:16 +01:00
2020-10-28 18:10:01 +01:00
2020-09-04 11:24:34 +02:00
2020-05-12 18:51:47 +02:00
2020-10-28 18:10:01 +01:00
2020-10-23 11:15:59 +02:00
2017-03-31 20:07:20 +02:00
2017-07-13 18:29:01 +02:00
2020-03-14 19:15:00 +01:00
2020-11-02 17:48:02 +01:00
2020-07-03 17:08:58 +02:00
2020-10-02 17:04:12 +02:00
2017-03-07 20:25:54 +09:00
2020-10-21 21:09:38 +02:00
2020-11-02 17:48:02 +01:00
2020-10-23 11:15:59 +02:00
2020-03-14 20:07:37 +01:00
2020-04-16 08:36:28 +02:00
2020-04-16 08:25:55 +02:00
2020-07-08 16:13:57 +02:00
2019-05-17 12:46:16 +02:00
2016-11-05 12:02:19 +01:00
2020-03-14 19:53:40 +01:00
2017-03-07 20:25:54 +09:00
2016-11-05 12:02:19 +01:00
2019-05-17 13:42:42 +02:00
2017-03-07 20:25:54 +09:00
2020-07-03 17:08:58 +02:00
2017-01-23 19:16:55 +01:00
2020-10-28 18:10:01 +01:00
2017-02-21 13:11:46 -05:00
2016-11-05 12:02:19 +01:00
2017-03-07 20:32:09 +09:00
2017-03-07 20:25:54 +09:00
2017-04-28 10:06:33 +09:00
2020-11-02 17:48:02 +01:00
2020-11-02 17:48:02 +01:00
2019-11-29 17:44:12 +01:00
2017-03-30 16:01:52 +02:00
2015-11-17 14:53:03 +01:00
2015-09-02 15:08:57 +02:00
2016-11-05 12:02:19 +01:00
2016-11-05 12:02:19 +01:00
2016-03-08 14:08:49 +01:00
2017-05-10 11:13:03 +09:00
2018-03-26 18:06:43 +02:00
2020-10-23 11:15:59 +02:00
2018-03-26 18:06:43 +02:00
2020-03-14 19:53:40 +01:00
2020-02-10 16:37:34 +01:00
2020-09-04 11:24:34 +02:00
2020-10-23 11:15:59 +02:00
2016-12-06 12:16:56 +01:00
2018-07-09 10:24:37 +02:00
2020-07-15 14:16:57 +09:00
2018-07-09 10:24:37 +02:00
2020-02-10 15:33:53 +01:00
2016-11-05 12:02:19 +01:00
4c181d51a6