Page MenuHome GnuPG
Create Task
Maniphest T4988

Kleopatra key generation does not use default algorithms 3072 but 2048
Closed, ResolvedPublic
Actions

Description

Testing Kleopatra from the current Gpg4win-3.1.11 a fresh key creation
(started from the front just after installation) uses 2048 RSA where it should use 3072,
because that is marked as default in the "advanced settings" dialog (but not selected).

how to reproduce

  • start a key creation -> OpenPGP
  • enter some values
  • hit "create"
  • in the checking dialog, click show details

Observation: 2024 is used.
Expectation: 3072 is used.

  • Abort, go back and restart
  • Hit "advanced" settings: RSA is selected and 2048 and 2048.
  • open the dropdown boxes for key length

Observation: 3072 is marked as "(default)", but was not selected
Expectation: "3072 (default)" should be selected, because no setting was changed.

tested with

Tested in Window 10 1903 DE and EN.
Kleopatra (from gpg4win 3.1.11) the website says 3.1.8, the about dialog says 3.1.11

Revisions and Commits

rKLEOPATRA Kleopatra
rKLEOPATRAb120b8cf4af2 Remove "default" indicator for adv. key sizes

Related Objects
Search...

Event Timeline

bernhard created this task.Jul 9 2020, 11:38 AM
bernhard updated the task description. (Show Details)Jul 9 2020, 11:40 AM
bernhard updated the task description. (Show Details)
• aheinecke added a commit: rKLEOPATRAb120b8cf4af2: Remove "default" indicator for adv. key sizes.Jul 9 2020, 1:12 PM
• werner added a subscriber: • werner.Jul 9 2020, 3:55 PM

The default for GnuPG 2.2 is still 2048 (Debian changed that in their distributed version). The reason for this is that we don't want to generate such keys but move on to Curve25519 for the new defaults.

FWIW, the VS-NfD profile sets the default RSA key size to 3072.

• aheinecke changed the task status from Open to Testing.Jul 16 2020, 2:35 PM
• aheinecke triaged this task as Normal priority.

Hi, yeah its complicated for Kleopatra to detect the defaults as they can be set both in Kleopatra config and GnuPG config. The GnuPG config overrides the Kleopatra config. Kleo has code to handle this but not when it adds the comboboxes to the GUI. So I've just removed the "default". We only had this for RSA and DSA / Elgamal, for ECC we did not indicate the default.

• aheinecke added a subtask: T4789: Gpg4win-3.1.12.Jul 16 2020, 2:35 PM
• aheinecke closed this task as Resolved.Aug 6 2020, 10:42 AM
• werner closed subtask T4789: Gpg4win-3.1.12 as Resolved.Nov 11 2020, 5:02 PM