| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
| |
code.
* keyid.c (keyid_from_sk): Make sure lowbits is initialized.
|
|
|
|
|
|
| |
rsa.c (rsa_verify), pubkey.c (dummy_verify, pubkey_verify): Remove old
unused code.
|
| |
|
|
|
|
|
|
|
|
|
| |
here... (signature_check2): ... to here. (check_key_signature2): ... and
here. This is a minor optimization to avoid fetching a key (which can be
expensive, especially if it is not self-signed, and there are many key
signatures on it which need to be checked for ultimate trust) if the
signature would have failed anyway because of algorithm or hash problems.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* keydb.h, keyid.c (hash_public_key, do_fingerprint_md): ... and make a
new one here that shares code with the fingerprint calculations. This
removes some duplicated functionality, and is also around 14% faster.
(Every bit helps).
* import.c (import_one): No longer need the Elgamal import warning.
* getkey.c (get_pubkey_fast): This one is sort of obscure. get_pubkey_fast
returns the primary key when requesting a subkey, so if a user has a key
signed by a subkey (we don't do this, but used to), AND that key is not
self-signed, AND the algorithm of the subkey in question is not present in
GnuPG, AND the algorithm of the primary key that owns the subkey in
question is present in GnuPG, then we will try and verify the subkey
signature using the primary key algorithm and hit a BUG(). The fix is to
not return a hit if the keyid is not the primary. All other users of
get_pubkey_fast already expect a primary only.
|
|
|
|
|
| |
keys. They are no longer needed.
|
|
|
|
|
|
| |
fingerprint_from_sk): Enforce the v3-is-only-RSA rule. Anything that
isn't RSA gets a zero keyid and fingerprint.
|
|
|
|
|
|
|
|
|
| |
don't know the structure of by using the opaque MPI.
(do_fingerprint_md_sk): We cannot calculate the fingerprint from a secret
key unless we know the structure (since we can't leave off the secret key
parts), so fail early..... (keyid_from_sk, fingerprint_from_sk): .... and
return all zeroes.
|
| |
|
|
|
|
|
|
|
| |
* README.CVS: New.
* autogen.sh: Revamped except for the --build-w32 hack.
* Makefile.am: Add README.CVS
|
|
|
|
|
|
|
|
| |
Christian Biere. Some minor grammar fixes. Remove the "host -l pgp.net |
grep wwwkeys" advice since the nameserver no longer all allow zone
transfers. Replace it with a mention of hkp://subkeys.pgp.net. Note that
BZIP2 defaults to compression level 6.
|
|
|
|
|
|
| |
Move it here. (handle_bzip2): Add this to handle BZIP2 compressed
messages.
|
| |
|
|
|
|
|
|
|
|
|
| |
gone.
* defs.inc, pubring.asc, secring.asc, plain-1.asc, plain-2.asc,
plain-3.asc: Remove the old v3 Elgamal keys and replace with RSA+Elgamal
and RSA s+e.
|
|
|
|
|
|
| |
alternate strings when not needed so we don't have to re-translate them.
Hopefully the comment will be enough to indicate multiple match strings.
|
|
|
|
|
| |
K*BSD (GNU userland with BSD kernel).
|
| |
|
|
|
|
|
|
|
| |
encrypt-only Elgamal keys. (pubkey_get_npkey, pubkey_get_nskey,
pubkey_get_nsig, pubkey_get_nenc, pubkey_nbits): Wrap the RSA cheats in
!USE_RSA. Add cheats for sign+encrypt Elgamal.
|
|
|
|
|
|
| |
output. (main): Set --bzip2-compress-level to the default value at
startup. Remove --emulate-checksum-bug noop.
|
| |
|
|
|
|
|
|
|
| |
encode_md_value), sig-check.c (do_check), sign.c (do_sign): Remove
--emulate-md-encode-bug as it only applied to Elgamal signatures, which
are going away.
|
|
|
|
|
|
|
|
| |
* configure.ac: Add --disable-rsa.
* README: Add --with-zlib, --with-bzip2, --without-bzip2, --disable-rsa,
and --enable-minimal. Update gettext version.
|
|
|
|
|
|
|
|
|
|
| |
(pubkey_get_npkey): Return 2 for RSA even if it isn't available so we can
at least handle RSA keys.
----------------------------------------------------------------------
pubkey.c CVS:
----------------------------------------------------------------------
|
| |
|
|
|
|
|
|
|
|
| |
--override-session-key on --symmetric messages (new-style or old-style).
(proc_pubkey_enc): Move code to show session key from here to
proc_encrypted() so it can work with any type of message. Suggested by
Michael Young.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
any ultimately trusted keys. This ensures that if we lose all our
ultimately trusted keys, we don't leave behind the old validity
calculations. Noted by Peter Palfrader.
* revoke.c (gen_desig_revoke): Specify in the comment when a designated
revocation is generated.
* getkey.c (merge_selfsigs_main, merge_selfsigs_subkey,
get_seckey_byname2): Remove Elgamal check since we are removing type 20
keys altogether.
|
| |
|
| |
|
| |
|
|
|
|
|
| |
longer.
|
| |
|
|
|
|
|
|
|
| |
* elgamal.c (gen_k): New arg SMALL_K.
(sign): Use it here with SMALL_K set to false
(do_encrypt): and here with SMALL_K set to true.
|
|
|
|
|
|
|
|
| |
mode.
* getkey.c (get_seckey_byname2): Disallow use of sign+encrypt Elgamal
keys.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
keys.
* getkey.c (merge_selfsigs_main, merge_selfsigs_subkey): Disallow use of
sign+encrypt Elgamal keys.
|
|
|
|
|
|
|
| |
notifications.
* NEWS: I meant "less" not "more".
|
|
|
|
|
| |
format string.
|
|
|
|
|
|
|
|
| |
Document --bzip2-compress-level, and --bzip2-compress-lowmem. Clarify the
plurarility (or not) of various list and verify options. Document BZIP2
in the --compress-algo section. Warn about compatibility issues with ZLIB
and BZIP2.
|
|
|
|
|
|
|
|
|
|
| |
entries.
* TRANSLATE: New, note to translators about the yes|yes multiple match
syntax.
* Makefile.am: Include TRANSLATE in distributed files.
|
|
|
|
|
| |
either.
|
|
|
|
|
|
|
| |
* misc.c (compress_algo_to_string): Translate "Uncompressed". Requested by
Tommi Vainikainen. (string_to_compress_algo): Include multi-string for
"uncompressed|none".
|
| |
|
|
|
|
|
|
|
| |
string with tokens separated by |. (answer_is_yes_no_default,
answer_is_yes_no_quit, answer_is_okay_cancel): Use it here to enable
alternate translations.
|
|
|
|
|
|
| |
--bz2-compress-lowmem to set bzlib "small" flag for low memory (but slow)
decompression.
|
|
|
|
|
|
|
|
|
|
| |
no longer needed.
* g10.c: Fix typoed option name.
* compress-bz2.c (init_compress): Compression level 0 is not meaningful
for bzip2.
|
|
|
|
|
|
| |
(init_compress): Add --compress-level and --bzip2-compress-level. -z sets
them both. Change various callers.
|
|
|
|
|
|
| |
default_compress_algo (--compress-algo, followed by the highest
--personal-compress-preference, followed by ZIP) to get the algorithm.
|
|
|
|
|
|
|
|
| |
"external" trust model, where the user can provide a pregenerated trustdb.
* keyedit.c (keyedit_menu): Do not allow editing ownertrust with an
external trust model trustdb.
|
|
|
|
|
| |
plurarility (or not) of various list and verify options.
|