gpg: New option --require-pqc-encryption

* g10/gpg.c (oRequirePQCEncryption): New.
(opts): Add option.
(main): Set option.
* g10/mainproc.c (print_pkenc_list): Print a warning.
* g10/options.h (flags): Add flag require_pqc_encryption.
* g10/getkey.c (finish_lookup): Skip non-pqc keys if the option is
set.
--

GnuPG-bug-id: 6815

1 files changed, 5 insertions, 1 deletions

diff --git a/g10/gpg.c b/g10/gpg.c
index 658fb7cf1..82745fa18 100644
--- a/g10/gpg.c
+++ b/g10/gpg.c
@@ -456,6 +456,7 @@ enum cmd_and_opt_values
     oAssertSigner,
     oAssertPubkeyAlgo,
     oKbxBufferSize,
+    oRequirePQCEncryption,
 
     oNoop
   };
@@ -896,7 +897,7 @@ static gpgrt_opt_t opts[] = {
   ARGPARSE_s_s (oCipherAlgo, "cipher-algo", "@"),
   ARGPARSE_s_s (oDigestAlgo, "digest-algo", "@"),
   ARGPARSE_s_s (oCertDigestAlgo, "cert-digest-algo", "@"),
-
+  ARGPARSE_s_n (oRequirePQCEncryption, "require-pqc-encryption", "@"),
 
   ARGPARSE_header (NULL, N_("Options for unattended use")),
 
@@ -3071,6 +3072,9 @@ main (int argc, char **argv)
             break;
 
 	  case oMinRSALength: opt.min_rsa_length = pargs.r.ret_ulong; break;
+          case oRequirePQCEncryption:
+            opt.flags.require_pqc_encryption = 1;
+            break;
 
           case oRFC2440Text: opt.rfc2440_text=1; break;
           case oNoRFC2440Text: opt.rfc2440_text=0; break;