gnupg, branch master

common: Allow the use of the newer ksba_parser_t functions.

2026-10-23T13:32:21Z

* common/tlv.h: Prepare for use obn ksba 1.9.0 functions. * common/tlv-parser.c [KSBA_VERSION_NUMBER]: Add wrappers for using the ksba versions of the code.

scd: Add askpin_inquiry for app-openpgp, not enabled for now.

2026-10-23T05:58:08Z

* scd/app-openpgp.c (struct verify_info): New. (pincheck_cb): New. (USE_ASKPIN_INQUIR): Please enable this macro when ready. (verify_a_chv): Use pincheck_cb. [USE_ASKPIN_INQUIR] (verify_a_chv): Use askpin_inquiry. * scd/command.c (askpin_inquiry): New. * scd/scdaemon.h (askpin_inquiry): New. -- GnuPG-bug-id: 8353 Signed-off-by: NIIBE Yutaka

gpg: Fix colon listing for ietf25 and ietf27 curves.

2026-10-21T05:51:37Z

* g10/keylist.c (list_keyblock_colon): Print the fixed curve name for PUBKEY_ALGO_X25519 and ...ED25519 -- GnuPG-bug-id: 8521

scd: Factor out pinpad_prompt, clean-up for app-openpgp.

2026-10-16T02:37:54Z

* scd/app-dinsig.c (verify_pin): Use pinpad_prompt for pinpad. * scd/app-nks.c (verify_pin): Likewise. * scd/app-openpgp.c (verify_a_chv): Factor in the SYNC_CHV handling originally in verify_chv2 and do_sign. Use pinpad_prompt for pinpad. (verify_chv2): Factor out the SYNC_CHV handling into verify_a_chv. (verify_chv3, do_change_pin): Use pinpad_prompt for pinpad. (do_sign): Factor out the SYNC_CHV handling. * scd/app-sc-hsm.c (verify_pin): Use pinpad_prompt for pinpad. * scd/command.c (pinpad_prompt): New. (askpin): Factor out to pinpad_prompt. (askpin): Factor out pinpad handling into pinpad_prompt. * scd/scdaemon.h (pinpad_prompt): New. -- GnuPG-bug-id: 8353 Signed-off-by: NIIBE Yutaka

agent: Implement ASKPIN/NEXTPIN/FINISHPIN inquiry in the agent side.

2026-10-14T04:59:52Z

* agent/agent.h: Include . (struct server_control_s): Add fields for new inquiries from scdaemon. (scd_getpin): Remove, it's now internal function in call-scd.c. * agent/divert-scd.c (scd_getpin): Move to .. * agent/call-scd.c (scd_getpin): .. here. (struct scd_local_s): Remove. (scd_check_cb, select_prompt, askpin_thread, start_askpin_thread) (finish_askpin_thread, scd_pin_request_start, scd_pin_request_next) (scd_pin_request_finish): New. (inq_needpin): Handle new inquiries ASKPIN, NEXTPIN, and FINISHPIN. -- GnuPG-bug-id: 8353 Signed-off-by: NIIBE Yutaka

Silence the compiler and add OIDs to gpgsm.

2026-10-13T12:26:22Z

* sm/keylist.c (oidtranstbl): Add some algos. * tools/gpgconf.c: Silence compiler warning.

gpg: Fill the curve field also for the RFC9980 algos.

2026-10-13T12:26:22Z

* g10/keylist.c (list_keyblock_colon): Print curve name for the new composite algos.

gpg:tdbio: Release the lock on error path.

2026-10-13T01:39:20Z

* g10/tdbio.c (put_record_into_cache): Call release_write_lock. (tdbio_sync): Likewise. -- Signed-off-by: NIIBE Yutaka

tests: Add a sample keypair from RFC9882.

2026-10-12T16:29:31Z

gpgsm: Support creation of verification of ML-DSA signatures.

2026-10-12T16:21:47Z

* common/sexputil.c (get_pk_algo_from_key): Enlarge buffer for algo name so that "dilithium3" can be detected. * agent/pksign.c (do_encode_mldsa): New. (agent_pksign_do): Call it. * sm/certcheck.c (pk_algo_from_sexp): Detected ML-DSA. (gpgsm_check_cms_signature): Support ML-DSA. Also rework error cleanup. * sm/sign.c (gpgsm_sign): Support ML-DSA. * sm/verify.c (gpgsm_verify): Fix a comment. -- Libgcrypt 1.12.5 and libksba 1.9.0 are required to work properly. GnuPG-bug-id: 8517