aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (unfollow)
Commit message (Collapse)AuthorFilesLines
2011-03-08Require libgcrypt 1.5Werner Koch3-18/+6
Without Libgcrypt 1.5 is was not possible to use ECC keys. ECC is major new feature and thus it does not make sense to allow building with an older Libgcrypt without supporting ECC. Also fixed a few missing prototypes.
2011-03-03Print the secret keyinfo stuff with --card-status again.Werner Koch3-65/+79
2011-03-03Minor code cleanups.Werner Koch3-8/+10
* keyid.c (hash_public_key): Remove shadowing NBITS. * misc.c (pubkey_nbits): Replace GCRY_PK_ by PUBKEY_ALGO_. (get_signature_count): Remove warning.
2011-03-03Fix faulty gcc warningsWerner Koch2-6/+10
2011-03-02Fix usage of SHA-2 algorithm with OpenPGP cards.Werner Koch3-148/+5
This was a regression in 2.1 introduced due to having the agent do the signing in contrast to the old "SCD PKSIGN" command which accesses the scdaemon directly and passed the hash algorithm. The hash algorithm is used by app-openpgp.c only for a sanity check.
2011-02-10Add ECC import regression tests and fixed a regression.Werner Koch2-16/+17
The import test imports the keys as needed and because they are passphrase protected we now need a pinentry script to convey the passphrase to gpg-agent.
2011-02-09Replace printf by es_printf in keyserver.cWerner Koch2-27/+28
This is similar to the change in keylist.c and elsewhere.
2011-02-08Add finger support to dirmngr.Werner Koch3-26/+89
The basic network code from http.c is used for finger. This keeps the network related code at one place and we are able to use the somewhat matured code form http.c. Unfortunately I had to enhance the http code for more robustness and probably introduced new bugs. Test this code using gpg --fetch-key finger:[email protected] (I might be the last user of finger ;-)
2011-02-07Fix ECDSA 521 bit signing.Werner Koch2-15/+20
This fix also allows the creation and use of an 521 bit ECDH key which used to fail while creating the binding signature.
2011-02-04Nuked almost all trailing white space.post-nuke-of-trailing-wsWerner Koch54-926/+906
We better do this once and for all instead of cluttering all future commits with diffs of trailing white spaces. In the majority of cases blank or single lines are affected and thus this change won't disturb a git blame too much. For future commits the pre-commit scripts checks that this won't happen again.
2011-02-04Removed deprecated SIGEXPIRED status line.Werner Koch2-2/+5
2011-02-03Fix test for gcry_pk_get_curve.Werner Koch2-1/+4
Add a compatibility fixes for the non-curve case. Remove -lber from the dirmngr link line.
2011-02-03Add a DECRYPTION_INFO status.Werner Koch2-25/+36
DECRYPTION_INFO <mdc_method> <sym_algo> Print information about the symmetric encryption algorithm and the MDC method. This will be emitted even if the decryption fails.
2011-02-03Relax mailbox name checking. Fixes bug#1315.Werner Koch2-41/+43
2011-02-03Extend algo selection menu.Werner Koch3-42/+75
This allows to add an ECC key and to set the capabilities of an ECDSA key. Fix printing of the ECC algorithm when creating a signature.
2011-02-03Finished ECC integration.ECC-INTEGRATION-2-1Werner Koch5-191/+219
Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-02-02Compute the fingerprint for ECDH only on demand.Werner Koch4-79/+90
This also fixes a failed assertion when using a v3 key where the fingerprint size is not 20.
2011-02-02Sample ECC keys and message do now work.Werner Koch9-252/+504
Import and export of secret keys does now work. Encryption has been fixed to be compatible with the sample messages. This version tests for new Libgcrypt function and thus needs to be build with a new Libgcrypt installed.
2011-01-31Move OpenPGP OID helpers to common/.Werner Koch3-205/+3
This is needed so that the agent will be able to export and import OpenPGP secret keys. Add test case. Removed unused function.
2011-01-31Fixed the ECC interface to Libgcrypt to be ABI compatible with the previous ↵Werner Koch7-144/+115
version. Quite some changes were needed but in the end we have less code than before. Instead of trying to do everything with MPIs and pass them back and forth between Libgcrypt and GnuPG, we know use the S-expression based interface and make heavy use of our opaque MPI feature. Encryption, decryption, signing and verification work with self-generared keys. Import and export does not yet work; thus it was not possible to check the test keys at https://sites.google.com/site/brainhub/pgpecckeys .
2011-01-31Reworked the ECC changes to better fit into the Libgcrypt API.Werner Koch10-356/+613
See ChangeLog for details. Key generation, signing and verification works. Encryption does not yet work. Requires latest Libgcrypt changes.
2011-01-26Function name cleanupsWerner Koch7-141/+142
Also nuked some trailing spaces.
2011-01-25Started with some code cleanups in ECDH.Werner Koch5-136/+158
The goal is to have the ECDH code more uniform with the other algorithms. Also make error messages and variable names more similar to other places.
2011-01-25More ECDH code cleanupsWerner Koch4-101/+72
2011-01-25Editorial cleanups of keygen.cWerner Koch6-254/+163
Also fixed a regression introduced by me in pubkey_enc.c. Added extra checks. Removed unused code.
2011-01-24Fix regression introduced by "editing only change".Werner Koch1-1/+1
Signing and verification using a new key works again.
2011-01-21Truncate the DSA hash; fixes regression.Werner Koch3-7/+8
Removed left over debug code.
2011-01-21Make most of the selftests work.Werner Koch3-19/+8
Note that there is still a problem with tests/openpgp/sigs.test while using the option --digest-algo SHA256.
2011-01-21Editorial changes and allow building with old libgcrypts.Werner Koch17-706/+801
Changed order of some conditional to make to put the special case into the true branch. Indentation changes. Minor other changes to make the ECC code more similar to the rest of our code. It builds but many sefltests still fail. Need to fix that before using it with an ECDH enabled libgcrypt. [/] 2011-01-21 Werner Koch <[email protected]> * configure.ac: Need Libgcrypt 1.4.6 due to AESWRAP. (HAVE_GCRY_PK_ECDH): Add new test. [agent/] 2011-01-21 Werner Koch <[email protected]> * cvt-openpgp.c (GCRY_PK_ECDH) [!HAVE_GCRY_PK_ECDH]: New. [include/] 2011-01-21 Werner Koch <[email protected]> * cipher.h (GCRY_PK_USAGE_CERT): Remove compatibility macros because we now require libgcrypt 1.4.6. (GCRY_PK_ECDH): Add replacement.
2011-01-20All standard keyserver commands are now using dirmngr.Werner Koch6-694/+300
2011-01-18Keyserver search and get basically works again.Werner Koch7-305/+749
2011-01-13Fixed key generation with P-521. Confirmed that signature generation and ↵Andrey Jivsov1-2/+2
verification work.
2011-01-11'g10/gpg2 --encrypt --debug 15 -r ecdsa -a -o _e.asc _' and 'g10/gpg2 ↵Andrey Jivsov6-131/+73
--debug 15 _e.asc', as well as decoding of an old message posted on https://sites.google.com/site/brainhub/pgpecckeys work. This is the milestone 2 that brings in ECDH support from http://code.google.com/p/gnupg-ecc/source/detail?r=15 . This corresponds to the commit 899386826c85f1e757e75bcc5d5b2159d05676a0 in libgcrypt
2011-01-10Initial code checking for backup - not yet working.Werner Koch9-58/+436
2011-01-06Milestone: Data signing/verification and key signing/verification work with ↵Andrey Jivsov1-1/+1
ECDSA.
2011-01-06Integrating http://code.google.com/p/gnupg-ecc/source/detail?r=15 .Andrey Jivsov23-153/+1370
The following works: gpg2 --gen-key (ECC) gpg2 --list-keys gpg2 --list-packets ~/.gnupg/pubring.gpg gpg2 --list-packets <private key from http://sites.google.com/site/brainhub/pgpecckeys> ECDH doesn't work yet as the code must be re-written to adjust for gpg-agent refactoring.
2010-12-09Change last change. Does now work.Werner Koch2-4/+19
2010-12-09Change dirmngr timer under W32CE.Werner Koch2-0/+23
Fix trustdb open problem under W32CE.
2010-12-02s/AES/AES128/ in diagnostics and --list-configWerner Koch2-1/+5
2010-11-23Change stack size for Wince.Werner Koch5-69/+96
Allow for a longer agent atartup under wince. Print gpg output via estream.
2010-11-17Smartcard related updatesWerner Koch9-298/+237
2010-10-29* pkclist.c (select_algo_from_prefs): Make sure the scores can'tDavid Shaw2-17/+43
overflow when picking an algorithm (not a security issue since we can't pick something not present in all preference lists, but we might pick something that isn't scored first choice). * pkclist.c (select_algo_from_prefs): Slightly improve the handling of MD5 in preference lists. Instead of replacing MD5 with SHA-1, just remove MD5 from the list altogether, and let the next-highest ranked algorithm be chosen.
2010-10-27Better support unsigned time_tWerner Koch3-7/+17
2010-10-26Re-implemented GPG's --passwd command and improved it.Werner Koch7-221/+183
2010-10-21Remove cruft.Werner Koch6-34/+28
Make --gen-revoke work
2010-10-20Enable i18n for W32.Werner Koch2-1/+4
2010-10-20Make public key data structure easier to read.Werner Koch18-134/+222
Check vor v1 card while signing.
2010-10-18replace some sprintf by bin2hex.Werner Koch2-17/+15
2010-10-18Fix a signing problem with the cardWerner Koch2-53/+27
2010-10-14All tests work are again workingWerner Koch4-25/+60