diff options
Diffstat (limited to 'doc/DETAILS')
| -rw-r--r-- | doc/DETAILS | 51 |
1 files changed, 40 insertions, 11 deletions
diff --git a/doc/DETAILS b/doc/DETAILS index 531f46500..7a43418b0 100644 --- a/doc/DETAILS +++ b/doc/DETAILS @@ -261,8 +261,9 @@ described here. Valid values are: - - 8 :: The key is compliant with RFC4880bis - - 23 :: The key is compliant with compliance mode "de-vs". + - 8 :: The key is compliant with RFC4880bis + - 23 :: The key is compliant with compliance mode "de-vs". + - 140 :: The key is compliant with compliance mode "fips". - 2023 :: The key is compliant with a compliance mode "de-vs" but the software has not yet been approved. - 6001 :: Screening hit on the ROCA vulnerability. @@ -1691,7 +1692,9 @@ Status codes are: * Object identifiers - OIDs below the GnuPG arc: +The OID 1.3.6.1.4.1.11591 has been assigned to the GNU project. The +list below shows only the OIDs relevant for GnuPG. You find the +definitive list in the [[http://www.gnu.org/prep/standards/html_node/OID-Allocations.html][GNU Standards document]]. #+begin_example 1.3.6.1.4.1.11591.2 GnuPG @@ -1718,8 +1721,33 @@ Status codes are: 1.3.6.1.4.1.11591.2.6.3 use for encryption key 1.3.6.1.4.1.11591.2.6.4 use for authentication key 1.3.6.1.4.1.11591.2.12242973 invalid encoded OID + 1.3.6.1.4.1.11591.12 DigestAlgorithms + 1.3.6.1.4.1.11591.12.2 TIGER/192 + 1.3.6.1.4.1.11591.13 EncryptionAlgorithms + 1.3.6.1.4.1.11591.13.2 Serpent + 1.3.6.1.4.1.11591.13.2.1 Serpent-128-ECB + 1.3.6.1.4.1.11591.13.2.2 Serpent-128-CBC + 1.3.6.1.4.1.11591.13.2.3 Serpent-128-OFB + 1.3.6.1.4.1.11591.13.2.4 Serpent-128-CFB + 1.3.6.1.4.1.11591.13.2.21 Serpent-192-ECB + 1.3.6.1.4.1.11591.13.2.22 Serpent-192-CBC + 1.3.6.1.4.1.11591.13.2.23 Serpent-192-OFB + 1.3.6.1.4.1.11591.13.2.24 Serpent-192-CFB + 1.3.6.1.4.1.11591.13.2.41 Serpent-256-ECB + 1.3.6.1.4.1.11591.13.2.42 Serpent-256-CBC + 1.3.6.1.4.1.11591.13.2.43 Serpent-256-OFB + 1.3.6.1.4.1.11591.13.2.44 Serpent-256-CFB + 1.3.6.1.4.1.11591.14 CRC Algorithms + 1.3.6.1.4.1.11591.14.1 CRC 32 + 1.3.6.1.4.1.11591.15 EllipticCurves + 1.3.6.1.4.1.11591.15.1 Ed25519 + 1.3.6.1.4.1.11591.15.25 ietf25 #+end_example +The curve ietf25 is actually X25519 as specified by RFC-7748. We used +the name X25519 already as an alias for Curve25519 in Libgcrypt but +with slighly different semantics. + The OpenPGP KDF/KEK parameter extension is used to convey additional info for OpenPGP keys as an X.509 extensions. @@ -1822,13 +1850,13 @@ Description of some debug flags: a key or signature. This is a list of comma delimited values with these defined fields: - | field | name | defined values | - |-------+------------------+------------------------| - | 1 | software product | see: prod-id | - | 2 | software version | e.g. "2.2", "2.5+1.12" | - | 3 | architecture | see: arch-id | - | 4 | operating system | see: os-id | - | 5 | compliance class | e.g. "23", "2023" | + | field | name | defined values | + |-------+------------------+--------------------------| + | 1 | software product | see: prod-id | + | 2 | software version | e.g. "2.2", "2.5+1.12" | + | 3 | architecture | see: arch-id | + | 4 | operating system | see: os-id | + | 5 | compliance class | e.g. "23", "2023", "140" | | prod-id | name | |---------+-------------| @@ -1853,7 +1881,8 @@ Description of some debug flags: If a value for a field is not known, the empty string may be used. The values are also used for the X.509/CMS extension 1.3.6.1.4.1.11591.2.1.2. The compliance class - values are 23 for "de-vs" and 2023 for non-approved "de-vs". + values are 23 for "de-vs" and 2023 for non-approved + "de-vs" or 140 for FIPS compliance. This notation shall be human readable. It is defined in away to minimize its size but to be easily viewable by |