From 4b2729b983bf3c6c1186ebdf1962f64d8cb1b3a1 Mon Sep 17 00:00:00 2001 From: Werner Koch Date: Mon, 3 Feb 2025 11:46:57 +0100 Subject: gpg: Simplify the compliance settings. * g10/gpg.c (set_compliance_option): Base most settings on oGnuPG. For oGnuPG explictly clear the allow_old_cipher_algos flag. -- Note that --allow-old-cipher-algos must now come after a compliance settings. This avoids a bug when first setting oRFC2440 and then oGnuPG which would not clear the flag. GnuPG-bug-id: T7501 --- doc/gpg.texi | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'doc') diff --git a/doc/gpg.texi b/doc/gpg.texi index fe2e5ce8c..9a621c89b 100644 --- a/doc/gpg.texi +++ b/doc/gpg.texi @@ -3687,7 +3687,9 @@ blocks of 64 bits; modern algorithms use blocks of 128 bit instead. To avoid certain attack on these old algorithms it is suggested not to encrypt more than 150 MiByte using the same key. For this reason gpg does not allow the use of 64 bit block size algorithms for encryption -unless this option is specified. +unless this option is specified. Some compliance modes already set or +clear this flag and thus this flags should be used after a compliance +mode setting. @item --allow-weak-digest-algos @opindex allow-weak-digest-algos -- cgit v1.2.3