gnupg

mirror of git://git.gnupg.org/gnupg.git synced 2024-12-22 10:19:57 +01:00

History

gpg,sm: Error out on compliance mismatch while decrypting.

* g10/pubkey-enc.c (get_session_key): Bail out if the algo is not
allowed in the current compliance mode.
* sm/decrypt.c (gpgsm_decrypt): Ditto.
--

The idea here is that the owner of the key created a non-compliant key
and later receives a mail encrypted to that key.  The sender should
have checked this key too but we can't guarantee that.  By hard
failing here the owner of the key will notice that he had created a
non-compliant key and thus has a chance to generate a new compliant
key.  In case the compliant criteria changes and the owner wants to
decrypt an old message he can still switch gpg to another compliant
mode.

Fixes-commit: a0d0cbee7654ad7582400efaa92d493cd8e669e9
GnuPG-bug-id: 3308
Signed-off-by: Werner Koch <wk@gnupg.org>

2017-08-01 08:41:47 +02:00

all-tests.scm

tests: Make it possible to run all tests using our infrastructure.

2017-05-11 18:12:37 +02:00

armor.c

g10, sm, dirmngr, common: Add comment for fall through.

2017-05-10 11:13:12 +09:00

build-packet.c

doc: Comment fixes and one trailing comma fix.

2017-07-20 18:13:40 +02:00

call-agent.c

Explain the "server is older than xxx warning".

2017-07-31 11:20:47 +02:00

call-agent.h

g10: Make sure to emit NEED_PASSPHRASE on --import of secret key.

2017-07-24 17:18:42 +02:00

call-dirmngr.c

Explain the "server is older than xxx warning".

2017-07-31 11:20:47 +02:00

call-dirmngr.h

gpg: Store key origin info for new DANE and WKD retrieved keys.

2017-07-24 20:09:52 +02:00

card-util.c

g10: Don't limit at the frontend side for card capability.

2017-07-21 11:22:38 +09:00

ChangeLog-2011

Spelling: correct spelling of "passphrase".

2016-11-02 12:53:58 +01:00

cipher.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

compress-bz2.c

g10,tools: Fix bzlib.h include order.

2017-04-11 13:52:19 +09:00

compress.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

cpr.c

gpg: Fix typos.

2017-05-30 14:30:43 +02:00

dearmor.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

decrypt-data.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

decrypt.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

dek.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

delkey.c

gpg: Pass CTRL to many more functions.

2017-03-31 20:07:20 +02:00

distsigkey.gpg

build: Update distributed signature key.

2016-12-20 10:22:05 +01:00

ecdh.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

encrypt.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

exec.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

exec.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

export.c

g10: Make sure to emit NEED_PASSPHRASE on --export-secret-key.

2017-07-24 16:03:25 +02:00

filter.h

Remove -I option to common.

2017-03-07 20:25:54 +09:00

free-packet.c

gpg: Fix possible double free of the card serialno.

2017-07-21 17:49:10 +02:00

getkey.c

gpg: Minor rework for better readibility of get_best_pubkey_byname.

2017-07-28 11:08:32 +02:00

gpg-w32info.rc

w32: Add manifest to gpg.

2015-02-04 09:15:34 +01:00

gpg.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

gpg.h

gpg: Avoid multiple open calls to the keybox file.

2017-03-31 21:27:16 +02:00

gpg.w32-manifest.in

w32: Add manifest to gpg.

2015-02-04 09:15:34 +01:00

gpgcompose.c

gpg: Avoid output to the tty during import.

2017-07-27 11:38:57 +02:00

gpgsql.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

gpgsql.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

gpgv.c

gpg: Close cached keydb handle in gpgv.

2017-06-21 15:51:10 +02:00

helptext.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

import.c

gpg: Avoid output to the tty during import.

2017-07-27 11:38:57 +02:00

kbnode.c

gpg: Extend free_packet to handle a packet parser context.

2017-03-29 12:08:31 +02:00

key-check.c

gpg: Avoid output to the tty during import.

2017-07-27 11:38:57 +02:00

key-check.h

gpg: Avoid output to the tty during import.

2017-07-27 11:38:57 +02:00

keydb.c

gpg: Print more stats for the keydb and the signature cache.

2017-03-31 20:08:23 +02:00

keydb.h

gpg: Minor rework for better readibility of get_best_pubkey_byname.

2017-07-28 11:08:32 +02:00

keyedit.c

gpg: Avoid output to the tty during import.

2017-07-27 11:38:57 +02:00

keyedit.h

gpg: Avoid output to the tty during import.

2017-07-27 11:38:57 +02:00

keygen.c

indent: Wrap an overlong line.

2017-07-27 11:41:40 +02:00

keyid.c

gpg: Make function mk_datestr public.

2017-07-20 18:13:40 +02:00

keylist.c

gpg: Avoid output to the tty during import.

2017-07-27 11:38:57 +02:00

keyring.c

gpg: Properly account for ring trust packets.

2017-05-08 14:33:11 +02:00

keyring.h

gpg: Pass CTRL to many more functions.

2017-03-31 20:07:20 +02:00

keyserver-internal.h

gpg: Pass key origin values to import functions.

2017-07-13 18:29:01 +02:00

keyserver.c

gpg: Extend --key-origin to take an optional URL arg.

2017-07-24 21:10:58 +02:00

main.h

gpg: Store key origin info for new DANE and WKD retrieved keys.

2017-07-24 20:09:52 +02:00

mainproc.c

gpg: Tweak compliance checking for verification

2017-07-27 16:22:36 +02:00

Makefile.am

tofu: Compare squares instead of square roots.

2017-07-10 18:09:42 +02:00

mdfilter.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

migrate.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

misc.c

common,gpg: Move the compliance option printer.

2017-06-07 16:53:32 +02:00

openfile.c

g10: Remove skeleton options files.

2017-05-02 18:55:32 +09:00

options.h

gpg: Extend --key-origin to take an optional URL arg.

2017-07-24 21:10:58 +02:00

packet.h

doc: Comment fixes and one trailing comma fix.

2017-07-20 18:13:40 +02:00

parse-packet.c

gpg: New option --key-origin.

2017-07-13 18:29:01 +02:00

passphrase.c

gpg: Pass CTRL to many more functions.

2017-03-31 20:07:20 +02:00

photoid.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

photoid.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pkclist.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

pkglue.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

pkglue.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

plaintext.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

progress.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

pubkey-enc.c

gpg,sm: Error out on compliance mismatch while decrypting.

2017-08-01 08:41:47 +02:00

pubring.asc

2017-01-23 19:16:55 +01:00

revoke.c

gpg: Pass CTRL to many more functions.

2017-03-31 20:07:20 +02:00

rmd160.c

Clean up word replication.

2017-02-21 13:11:46 -05:00

rmd160.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

seckey-cert.c

More change for common.

2017-03-07 20:32:09 +09:00

server.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

seskey.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

sig-check.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

sign.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

skclist.c

g10: Fix default-key selection for signing, possibly by card.

2017-05-22 09:27:36 +09:00

t-keydb-get-keyblock.c

gpg: Fix actual leak and possible leaks in the packet parser.

2017-03-30 16:01:52 +02:00

t-keydb-get-keyblock.gpg

gpg: Correctly handle keyblocks followed by legacy keys.

2015-11-17 14:53:03 +01:00

t-keydb-keyring.kbx

g10: Add test for keydb as well as new testing infrastructure.

2015-09-02 15:08:57 +02:00

t-keydb.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-rmd160.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-stutter-data.asc

gpg: Add a new test.

2016-03-08 14:08:49 +01:00

t-stutter.c

g10: Stop compiler warning for t-stutter.

2017-05-10 11:13:03 +09:00

tdbdump.c

gpg: Pass CTRL to many more functions.

2017-03-31 20:07:20 +02:00

tdbio.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

tdbio.h

gpg: Pass CTRL to many more functions.

2017-03-31 20:07:20 +02:00

test-stubs.c

gpg: Pass CTRL to many more functions.

2017-03-31 20:07:20 +02:00

test.c

tests: Locate resources and scripts relative to top source dir.

2017-04-24 14:14:05 +02:00

textfilter.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

tofu.c

tofu: Compare squares instead of square roots.

2017-07-10 18:09:42 +02:00

tofu.h

g10: Remove dead code.

2016-12-06 12:16:56 +01:00

trust.c

gpg: Pass CTRL to many more functions.

2017-03-31 20:07:20 +02:00

trustdb.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

trustdb.h

gpg: Pass CTRL to many more functions.

2017-03-31 20:07:20 +02:00

verify.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

zlib-riscos.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00