1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-22 10:19:57 +01:00
Werner Koch 825dd7220f
gpg: Do not allow old cipher algorithms for encryption.
* g10/gpg.c: New option --allow-old-cipher-algos.
(set_compliance_option): Set --rfc4880bis explictly to SHA256 and
AES256.  Allow old cipher algos for OpenPGP, rfc4880, and rfc2440.
* g10/options.h (opt): Add flags.allow_old_cipher_algos.
* g10/misc.c (print_sha1_keysig_rejected_note): Always print the note
unless in --quiet mode.
* g10/encrypt.c (setup_symkey): Disallow by default algos with a
blocklengt < 128.
(encrypt_crypt): Ditto.  Fallback by default to AES instead of 3DES.
* g10/pkclist.c (algo_available): Take care of old cipher also.
(select_algo_from_prefs): Use AES as implicit algorithm by default.

* tests/openpgp/defs.scm (create-gpghome): Set allow-old-cipher-algos.
--

GnuPG-bug-id: 3415
2021-02-10 14:40:02 +01:00
..
2014-12-14 12:15:21 +01:00
sm/
2006-11-14 10:23:21 +00:00
2016-09-20 09:32:25 +09:00
DCO
2013-04-17 11:26:27 +02:00
2018-10-24 14:39:56 -04:00
2003-01-09 13:24:01 +00:00
2016-09-20 09:56:22 +09:00
2010-06-10 10:39:44 +00:00
2007-07-04 19:49:40 +00:00
2007-03-08 18:31:56 +00:00
2014-07-03 11:03:22 +02:00
2020-08-28 09:09:05 +02:00
2020-11-23 12:11:15 +01:00
2007-05-08 13:59:41 +00:00
2006-08-21 20:20:23 +00:00
2020-02-18 18:07:46 -05:00
2016-09-20 09:56:22 +09:00
2012-11-30 12:47:49 -05:00
2011-08-12 14:40:47 +02:00
2021-02-09 18:42:25 +01:00
2017-02-21 13:11:46 -05:00
2006-12-06 16:38:34 +00:00
2020-02-18 18:07:46 -05:00