gnupg, branch wk/rfc9980The GNU Privacy Guard.http://git.bktus.com/gpgfrontend/gnupg/atom?h=wk%2Frfc99802026-09-11T09:05:35Zgpg: Implictly set allow-9980 in de-vs compliance mode.2026-09-11T09:05:35ZWerner Kochwk@gnupg.org2026-09-11T09:05:35Zurn:sha1:68558102f8a23a2af14ed96571144dab1c9e95c1
* g10/gpg.c (set_compliance_option): Enable 9980 in de-vs mode.
gpg: Always allow parsing of rfc-9980 packets.2026-09-11T09:04:26ZWerner Kochwk@gnupg.org2026-09-11T09:04:26Zurn:sha1:925fa2b11cf676a6127aff2ea0c95c2360aa9dc5
* g10/build-packet.c (do_key): Do not require --allow-9980 to write the
key.
* g10/parse-packet.c (RFC9980): Do not require --allow-9980 to parse
key packets.
--
For robustness reasons it is better to not depend the behaviour of the
parser depending on the use of --allow-9980.
gpgconf: Print the content of a versioninfo.txt file in verbose mode2026-09-10T13:08:26ZWerner Kochwk@gnupg.org2026-09-10T13:07:31Zurn:sha1:e5251910f6290b3e61918534d967970e17805287
* tools/gpgconf.c (show_versioninfo_txt): New.
(show_versions): Call it in verbose mode.
tests: Add a test for the new Brainpool and NIST 9980 encryption.2026-09-09T16:30:49ZWerner Kochwk@gnupg.org2026-09-09T16:16:47Zurn:sha1:fcc9b4d1841d3cf13a59f687450fe053c8e55f76
* tests/openpgp/encrypt-mlk.scm: New.
* tests/openpgp/defs.scm (create-gpghome): Make it a wrapper for ...
(create-gpghome-with-mode): this. Optionally add allow-9980.
(setup-9980-environment): New.
* tests/openpgp/privkeys/: Add 9 new private keys for the recently
added MLK public keys.
* tests/openpgp/samplemsgs/: Add 4 samples for the new subkeys.
gpg: New debug option to get the secret key as s-expression.2026-09-09T16:24:04ZWerner Kochwk@gnupg.org2026-09-09T16:23:47Zurn:sha1:1e0261fe50089bbfd0bb9a8d0e3dfe2408a3d134
* g10/options.h (LIST_DEBUG_SHOW_SEXP): New.
* g10/gpg.c (parse_list_options): Add "debug-show-sexp".
* g10/import.c (seckey_packet_to_nvc): New. Add stubs as needed to
other modules.
* g10/parse-packet.c (parse_key): Output the secret key in list mode
if the new options is used.
gpg: Add Brainpool and NIST as specified by an RFC-9980 update.2026-09-09T16:21:28ZWerner Kochwk@gnupg.org2026-09-09T16:20:30Zurn:sha1:ab00af1cb8b1db599bebb397f4fb90696bbe3ffb
* common/openpgpdefs.h (pubkey_algo_t): Add constants for algorithm
numbers proposed for the rfc-9980 update. Also reserve one for
Dilithium.
(IS_PUBKEY_ALGO_MLK768): New.
(IS_PUBKEY_ALGO_MLK1024): New.
(IS_PUBKEY_ALGO_MLK): New.
* g10/misc.c (openpgp_pk_test_algo2): Add the new MLK algos.
(openpgp_pk_algo_usage): Ditto.
(openpgp_pk_algo_name): Ditto.
(pubkey_get_npkey): Ditto.
(pubkey_get_nskey): Ditto.
(pubkey_get_nenc): Ditto.
* g10/keyid.c (pubkey_string): Ditto.
(keygrip_from_pk): Ditto. Simplify by using the new macros.
(hexkeygrip_from_pk): Simplify.
* g10/pkglue.c (do_encrypt_kem): Use the new macros to handle the new
MLK algos. Map the new algos to ECC curve names.
(pk_encrypt): Support all MLK algos.
* g10/pubkey-enc.c (get_session_key): Ditto.
(get_it): Ditto.
* g10/seskey.c (encode_session_key): Ditto.
* g10/encrypt.c (create_dek_with_warnings): Ditto.
(use_rfc9980_seipdv2): Ditto.
(write_pubkey_enc): Ditto.
* g10/keygen.c (PQC9980_STD_KEY_PARAM_SUB): Change to use mlk768_bp384.
(ecckey_from_sexp): Support all MLK algos.
(common_gen): Ditto.
(gen_kyber): Add parameters for the new algos.
(get_keysize_range): Support the new algos.
(fixup_keysize): Support all MLK algos.
(do_create): Ditto.
(parse_key_parameter_part): Fix "mlk768" input to use "ietf25". Add
parameters for the new MLK algos.
* g10/import.c (build_mode1003_sexp): Support the new MLK algos.
* g10/parse-packet.c (parse_pubkeyenc): Add support for the new MLK
algos.
(parse_key): Ditto.
* kbx/keybox-openpgp.c (keygrip_from_keyparm): Ditto.
(parse_key): Ditto.
* g10/build-packet.c (do_key): Ditto.
(do_pubkey_enc_v6): Ditto.
--
This uses the proposed algorithm numbers and was tested by modified
samples taken from
https://github.com/openpgp-pqc/draft-ietf-openpgp-nist-bp-comp/tree/ \
main/test-vectors
on 2026-09-03 with the subkey packets extracted and added to a ietf27
primary key created by gpg. The actual samples could not be tested
due to the stupid direct-signature-only-metadata and because we have
not yet implemented the ML-DSA.
gpg: Improve debug diagnostics for invalid packets.2026-09-08T09:42:26ZWerner Kochwk@gnupg.org2026-09-08T09:42:26Zurn:sha1:f5f3c8d448d7e06c0421ae6d71ff0c7b3427e04a
* g10/parse-packet.c (parse): print extra infor for an invalid packet
in double verbose mode.
tests: Add constructed sample keys for RFC-9980 NIST and Brainpool2026-09-03T13:22:09ZWerner Kochwk@gnupg.org2026-09-03T13:22:09Zurn:sha1:4a886e44e75dc9e778df422857bde9ced7445327
--
gpg: New --edit-key command "addpubkey"2026-09-02T14:16:21ZWerner Kochwk@gnupg.org2026-09-02T14:16:21Zurn:sha1:e835a43201014c04702eb9bd6b827cf4ae2569fc
* g10/keyedit.c (cmdADDPUBKEY): New.
(cmds): Add "addpubkey".
(keyedit_menu): Implement.
--
This command is only useful for test purposes and thus not further
documented.
doc: Describe the --allow-9980 option2026-09-02T08:49:45ZWerner Kochwk@gnupg.org2026-09-02T08:49:45Zurn:sha1:5c5039b90f16d90384fee4e9cdea4995db3abbaa
--