From 37228cfa05005d56f0683782004edddb964f9192 Mon Sep 17 00:00:00 2001 From: Werner Koch Date: Thu, 16 Jun 2011 14:27:33 +0200 Subject: Allow generation of card keys up to 4096 bit. This patch implementes a chunk mode to pass the key parameters from scdaemon to gpg. This allows to pass arbitrary long key paremeters; it is used for keys larger than 3072 bit. Note: the card key generation in gpg is currently broken. The keys are generated but it is not possible to create the self-signature because at that time the gpg-agent does not yet know about the new keys and thus can't divert the sign request to the card. We either need to run the learn command right after calling agent_scd_genkey or implement a way to sign using the currently inserted card. Another option would be to get rid of agent_scd_genkey and implement the feature directly in agent_genkey. --- g10/card-util.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'g10/card-util.c') diff --git a/g10/card-util.c b/g10/card-util.c index 0ffb18dd7..9c124bbfc 100644 --- a/g10/card-util.c +++ b/g10/card-util.c @@ -1294,7 +1294,7 @@ static unsigned int ask_card_keysize (int keyno, unsigned int nbits) { unsigned int min_nbits = 1024; - unsigned int max_nbits = 3072; /* GnuPG limit due to Assuan. */ + unsigned int max_nbits = 4096; char *prompt, *answer; unsigned int req_nbits; -- cgit v1.2.3