Page MenuHome GnuPG

Invalid flag adding encryption subkey with Curve 25519
Closed, ResolvedPublic

Description

I know GnuPG is not supporting yet Curve 25519 for encryption, but I was trying to add
a subkey and found that Curve 25519 appears as an option, yet it will fail with
invalid flag from agent_genkey; here's how to reproduce it:

gpg> addkey
Please select what kind of key you want:
   (3) DSA (sign only)
   (4) RSA (sign only)
   (5) Elgamal (encrypt only)
   (6) RSA (encrypt only)
   (7) DSA (set your own capabilities)
   (8) RSA (set your own capabilities)
  (10) ECC (sign only)
  (11) ECC (set your own capabilities)
  (12) ECC (encrypt only)
  (13) Existing key
Your selection? 12
Please select which elliptic curve you want:
   (1) Curve 25519
   (2) NIST P-256
   (3) NIST P-384
   (4) NIST P-521
   (5) Brainpool P-256
   (6) Brainpool P-384
   (7) Brainpool P-512
Your selection? 1
gpg: WARNING: Curve25519 is not yet part of the OpenPGP standard.
Use this curve anyway? (y/N) y
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 6m
Key expires at Wed Sep  7 16:28:44 2016 COT
Is this correct? (y/N) y
Really create? (y/N) y
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
gpg: agent_genkey failed: Invalid flag
gpg: Key generation failed: Invalid flag

gpg>

BTW, how far away is the support for encryption with 25519?

Details

Version
2.1.11

Event Timeline

ghostbar added projects: gnupg, Bug Report.
ghostbar added a subscriber: ghostbar.

It is fully supported but you need to link agains libgcrypt 1.7 which has not
yet been released.

That's excellent! I tried with no luck to find a roadmap on when 1.7 could be released;
do you have any ETA? How could I help to make it happen?

Thanks!

As soon as it is ready. 1.7. will be the next release we plan to do - before
gnupg 2.1.12.

libgcrypt 1.7.0 is out. Please test with it.

gniibe removed a project: Restricted Project.