security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-22 10:19:57 +01:00
Code Activity
gnupg/g10
History
Werner Koch d1f2a6d9f7
gpg: Switch to AES256 for symmetric encryption in de-vs mode. 
* g10/gpg.c (set_compliance_option): For AES256 and SHA256 in de-vs
mode.
* g10/encrypt.c (setup_symkey): Add extra compliance check.
(encrypt_simple): Avoid printing a second error oncplinace failure.
--

Because we used the RFC4880 mode as base for the de-vs mode we got
3DES as symmetric encryption algorithm.  With the default gnupg mode
that was already used.  The new extra compliance checks are added to
detect whether a --personal-cipher-preference or --cipher-algo option
tried to override the algorithms.  They are still possible but now
non-compliant algorithms will throw an error.

Manual testing can be done with commands like this:

  gpg --no-options --compliance=de-vs \
   --personal-cipher-preferences "S1 S7" \
   --pinentry-mode loopback -v --passphrase abc -ac </etc/motd

Here the command fails due to IDEA (S1) being the preferred cipher
algorithm.  Using "--s2k-digest-algo SHA1" instead of
--personal-cipher-preferences will also fail.

Signed-off-by: Werner Koch <wk@gnupg.org>
2020-11-03 15:37:40 +01:00
..
all-tests.scm
tests: Make it possible to run all tests using our infrastructure.
2017-05-11 18:12:37 +02:00
armor.c
g10: Fix possible null dereference.
2019-05-14 11:20:07 +09:00
build-packet.c
gpg,ecc: Handle external representation as SOS with opaque MPI.
2020-06-09 10:32:47 +09:00
call-agent.c
g10: Make call to agent_scd_serialno more robust.
2020-10-26 12:50:30 +01:00
call-agent.h
gpg,tools: Add handling of supported algorithms by a card.
2020-09-08 15:34:42 +09:00
call-dirmngr.c
Use only one copy of the warn_server_mismatch function.
2020-09-01 20:43:57 +02:00
call-dirmngr.h
gpg: Store key origin info for new DANE and WKD retrieved keys.
2017-07-24 20:09:52 +02:00
call-keyboxd.c
gpg: New experimental import option "bulk-import"
2020-09-24 16:47:10 +02:00
card-util.c
g10: Make call to agent_scd_serialno more robust.
2020-10-26 12:50:30 +01:00
ChangeLog-2011
Spelling: correct spelling of "passphrase".
2016-11-02 12:53:58 +01:00
cipher-aead.c
g10: Fix log_debug formatting.
2018-11-08 12:14:23 +09:00
cipher-cfb.c
gpg: Remove MDC options
2018-05-29 12:42:52 +02:00
compress-bz2.c
g10,tools: Fix bzlib.h include order.
2017-04-11 13:52:19 +09:00
compress.c
gpg: Fix minor memory leak in the compress filter.
2018-05-02 20:15:10 +02:00
cpr.c
Use only one copy of the warn_server_mismatch function.
2020-09-01 20:43:57 +02:00
dearmor.c
Revert "g10: Always save standard revocation certificate in file."
2017-08-01 19:08:16 +02:00
decrypt-data.c
gpg: Make AEAD modes subject to compliance checks.
2020-04-16 08:52:29 +02:00
decrypt.c
gpg: Fix using --decrypt along with --use-embedded-filename.
2019-05-17 13:40:24 +02:00
dek.h
gpg: More check for symmetric key encryption.
2019-07-18 11:02:34 +09:00
delkey.c
gpg: Prepare enhancement of agent_probe_secret_key.
2020-01-17 16:09:01 +09:00
distsigkey.gpg
Add a new dist signing key
2020-08-24 19:47:26 +02:00
ecdh.c
ecc: Use "cv448" to specify key using X448.
2020-06-23 10:10:29 +09:00
encrypt.c
gpg: Switch to AES256 for symmetric encryption in de-vs mode.
2020-11-03 15:37:40 +01:00
exec.c
gpg: photoid: Move functions from exec.c.
2019-07-25 11:21:58 +09:00
exec.h
gpg: photoid: Move functions from exec.c.
2019-07-25 11:21:58 +09:00
expand-group.c
gpg: Fix expand GPG groups when resolving a key
2019-09-30 14:08:13 +02:00
export.c
gpg: Fix first zero-byte case for SOS handling.
2020-10-30 15:21:20 +09:00
filter.h
g10/armor: use libgcrypt's CRC24 implementation
2018-11-08 21:31:12 +02:00
free-packet.c
gpg: Fix for new SOS changes when used with Libgcrypt < 1.8.6.
2020-06-09 18:16:44 +02:00
getkey.c
doc: Some documentation updates.
2020-09-21 09:20:47 +02:00
gpg-w32info.rc
w32: Add manifest to gpg.
2015-02-04 09:15:34 +01:00
gpg.c
gpg: Switch to AES256 for symmetric encryption in de-vs mode.
2020-11-03 15:37:40 +01:00
gpg.h
gpg: Change the way v5 fingerprints are printed.
2019-11-28 12:05:32 +01:00
gpg.w32-manifest.in
w32: Add manifest to gpg.
2015-02-04 09:15:34 +01:00
gpgcompose.c
build: Always use EXTERN_UNLESS_MAIN_MODULE pattern.
2020-02-10 16:50:47 +01:00
gpgsql.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
gpgsql.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
gpgv.c
gpg: If possible TRUST values now depend on signer's UID or --sender.
2020-06-08 20:13:25 +02:00
helptext.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
import.c
gpg: New experimental import option "bulk-import"
2020-09-24 16:47:10 +02:00
kbnode.c
gpg: Avoid importing secret keys if the keyblock is not valid.
2019-03-15 20:41:38 +01:00
key-check.c
gpg: Fix debug output for key_check_all_keysigs with opaque MPI.
2020-11-02 11:32:27 +09:00
key-check.h
gpg: Avoid output to the tty during import.
2017-07-27 11:38:57 +02:00
key-clean.c
gpg: Sort the signatures in standard key listings.
2020-10-27 17:21:19 +01:00
key-clean.h
headers: fix spelling
2018-10-25 16:53:05 -04:00
keydb-private.h
gpg: Set the found-by flags in the keyblock in keyboxd mode.
2020-09-22 16:20:41 +02:00
keydb.c
g10,sm: Use gnupg_access at two more places
2020-10-26 12:50:13 +01:00
keydb.h
gpg: Fix trustdb for v5key.
2020-08-07 13:02:47 +09:00
keyedit.c
gpg: Fix iteration over signatures
2020-11-02 09:14:03 +01:00
keyedit.h
gpg: New command --quick-revoke-sig
2020-10-28 17:06:27 +01:00
keygen.c
gpg: Switch to ed25519+cv25519 as default algo.
2020-10-05 14:21:31 +02:00
keyid.c
gpg: Fix trustdb for v5key.
2020-08-07 13:02:47 +09:00
keylist.c
gpg: New command --quick-revoke-sig
2020-10-28 17:06:27 +01:00
keyring.c
Replace all calls to stat by gnupg_stat.
2020-10-20 16:38:06 +02:00
keyring.h
gpg: Pass CTRL to many more functions.
2017-03-31 20:07:20 +02:00
keyserver-internal.h
gpg: Pass key origin values to import functions.
2017-07-13 18:29:01 +02:00
keyserver.c
gpg: Add property "fpr" for use by --export-filter.
2020-03-13 13:19:31 +01:00
main.h
gpg: Do not use weak digest algos if selected by recipient prefs.
2020-11-02 13:45:19 +01:00
mainproc.c
sm: Exclude rsaPSS from de-vs compliance mode.
2020-07-03 16:15:29 +02:00
Makefile.am
build: New configure option --disable-tests
2020-08-20 10:54:17 +02:00
mdfilter.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
migrate.c
Replace most of the remaining stdio calls by estream calls.
2020-10-20 12:15:56 +02:00
misc.c
gpg: Allow setting notations with the empty string as value.
2020-11-02 17:34:29 +01:00
objcache.c
Spelling cleanup.
2020-02-18 18:07:46 -05:00
objcache.h
gpg: Fix getting User ID.
2019-07-11 12:32:44 +09:00
openfile.c
Replace all calls to stat by gnupg_stat.
2020-10-20 16:38:06 +02:00
options.h
gpg: Sort the signatures in standard key listings.
2020-10-27 17:21:19 +01:00
packet.h
doc: Minor code comment fixes.
2020-06-08 15:22:58 +02:00
parse-packet.c
gpg,ecc: Handle external representation as SOS with opaque MPI.
2020-06-09 10:32:47 +09:00
passphrase.c
gpg: Use integrated passphrase repeat entry also for -c.
2020-07-08 14:33:25 +02:00
photoid.c
gpg: Allow setting notations with the empty string as value.
2020-11-02 17:34:29 +01:00
photoid.h
gpg: A little clean up.
2019-07-23 12:04:21 +09:00
pkclist.c
gpg: Extend the TRUST_ status lines.
2020-06-09 11:00:16 +02:00
pkglue.c
gpg: Fix first zero-byte case for SOS handling.
2020-10-30 15:21:20 +09:00
pkglue.h
gpg: Use bytes for ECDH.
2020-06-09 15:45:51 +09:00
plaintext.c
gpg: Fix using --decrypt along with --use-embedded-filename.
2019-05-17 13:40:24 +02:00
progress.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
pubkey-enc.c
gpg: Reword warning about decryption w/o using a non-encrypt key.
2020-07-14 11:01:45 +02:00
pubring.asc
Update copyright notices for 2017.
2017-01-23 19:16:55 +01:00
revoke.c
gpg: New command --quick-revoke-sig
2020-10-28 17:06:27 +01:00
rmd160.c
Clean up word replication.
2017-02-21 13:11:46 -05:00
rmd160.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
seckey-cert.c
More change for common.
2017-03-07 20:32:09 +09:00
server.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
seskey.c
gpg,ecc: Handle external representation as SOS with opaque MPI.
2020-06-09 10:32:47 +09:00
sig-check.c
gpg: Do not use weak digest algos if selected by recipient prefs.
2020-11-02 13:45:19 +01:00
sign.c
gpg: Do not use weak digest algos if selected by recipient prefs.
2020-11-02 13:45:19 +01:00
skclist.c
gpg: Rename the struct card_key_info_s.
2020-02-12 17:29:51 +01:00
t-keydb-get-keyblock.c
gpg: New option --use-keyboxd.
2019-09-09 15:01:47 +02:00
t-keydb-get-keyblock.gpg
gpg: Correctly handle keyblocks followed by legacy keys.
2015-11-17 14:53:03 +01:00
t-keydb-keyring.kbx
g10: Add test for keydb as well as new testing infrastructure.
2015-09-02 15:08:57 +02:00
t-keydb.c
gpg: New option --use-keyboxd.
2019-09-09 15:01:47 +02:00
t-rmd160.c
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
t-stutter-data.asc
gpg: Add a new test.
2016-03-08 14:08:49 +01:00
t-stutter.c
g10: Stop compiler warning for t-stutter.
2017-05-10 11:13:03 +09:00
tdbdump.c
Merge branch 'STABLE-BRANCH-2-2' into master
2018-03-27 08:48:00 +02:00
tdbio.c
Replace all calls to stat by gnupg_stat.
2020-10-20 16:38:06 +02:00
tdbio.h
gpg: Pass CTRL arg to get_trusthashrec.
2018-03-26 18:06:43 +02:00
test-stubs.c
gpg: If possible TRUST values now depend on signer's UID or --sender.
2020-06-08 20:13:25 +02:00
test.c
build: Always use EXTERN_UNLESS_MAIN_MODULE pattern.
2020-02-10 16:50:47 +01:00
textfilter.c
gpg: Initialize a parameter to silence valgrind.
2020-09-04 11:32:47 +02:00
tofu.c
Replace all calls to stat by gnupg_stat.
2020-10-20 16:38:06 +02:00
tofu.h
g10: Remove dead code.
2016-12-06 12:16:56 +01:00
trust.c
gpg: Move key cleaning functions to a separate file.
2018-07-06 11:40:16 +02:00
trustdb.c
gpg: Sort the signatures in standard key listings.
2020-10-27 17:21:19 +01:00
trustdb.h
gpg: Move key cleaning functions to a separate file.
2018-07-06 11:40:16 +02:00
verify.c
gpg: Make really sure that --verify-files always returns an error.
2020-02-10 15:32:55 +01:00
zlib-riscos.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00