diff options
| author | Werner Koch <[email protected]> | 2021-08-18 16:24:35 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2021-08-18 16:46:39 +0000 |
| commit | b89b1f35c29ceaebe39b31444936aa66c9297f2c (patch) | |
| tree | 79a5d2e754f1276389eb02c02ba06817ec7c9af8 /doc/gpg-agent.texi | |
| parent | agent: Improve the GENPIN callback. (diff) | |
| download | gnupg-b89b1f35c29ceaebe39b31444936aa66c9297f2c.tar.gz gnupg-b89b1f35c29ceaebe39b31444936aa66c9297f2c.zip | |
agent: Ignore passphrase constraints for a generated passphrase.
* agent/agent.h (PINENTRY_STATUS_PASSWORD_GENERATED): New.
(MAX_GENPIN_TRIES): Remove.
* agent/call-pinentry.c (struct entry_parm_s):
(struct inq_cb_parm_s): Add genpinhash and genpinhas_valid.
(is_generated_pin): New.
(inq_cb): Suppress constraints checking for a generated passphrase.
No more need for several tries to generate the passphrase.
(do_getpin): Store a generated passphrase/pin in the status field.
(agent_askpin): Suppress constraints checking for a generated
passphrase.
(agent_get_passphrase): Ditto.
* agent/command.c (cmd_get_passphrase): Ditto.
--
A generated passphrase has enough entropy so that all kind of extra
checks would only reduce the actual available entropy. We thus detect
if a passphrase has been generated (and not changed) and skip all
passphrase constraints checking.
Diffstat (limited to 'doc/gpg-agent.texi')
| -rw-r--r-- | doc/gpg-agent.texi | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/doc/gpg-agent.texi b/doc/gpg-agent.texi index 5413a88ac..b50767060 100644 --- a/doc/gpg-agent.texi +++ b/doc/gpg-agent.texi @@ -476,7 +476,11 @@ user for a new passphrase and masking of the passphrase is turned off. If passphrase formatting is enabled, then all non-breaking space characters are stripped from the entered passphrase. Passphrase formatting is mostly -useful in combination with passphrases generated with the GENPIN command. +useful in combination with passphrases generated with the GENPIN +feature of some Pinentries. Note that such a generated +passphrase, if not modified by the user, skips all passphrase +constraints checking because such constraints would actually weaken +the generated passphrase. @item --pinentry-program @var{filename} @opindex pinentry-program |