Page MenuHome GnuPG
Create Task
Maniphest T6253

GpgSM: Backport ECC support to 2.2
Closed, ResolvedPublic
Actions

Description

We should have full ECC support in gpgsm 2.2 so that we can use ECC cards.

Revisions and Commits

rG GnuPG
rG2c3c049fd8a0 sm: Flag Brainpool curves as compliant for all other operations.
rGf0e127defb87 sm: Flag Brainpool curves as compliant for all other operations.
rG97708e2ac722 sm: Flag Brainpool curves as compliant.
rGafacacec129c sm: Flag Brainpool curves as compliant.
rG2e7a08a82944 sm: Support import of PKCS#12 encoded ECC private keys.
rG7c3aeb2a57ea gpgsm: Support signing using ECDSA.
rG266a6602f0c9 gpgsm: Some more ECC support backported.
rGfd0ddf26990d gpgsm: New compatibility flag "allow-ecc-encr".
rG28467f3735f7 sm: Support encryption using ECDH keys.
rGd770715e1574 gpgsm: Allow ECC encryption keys with just keyAgreement specified.
rG9f1181e1a7ed gpgsm: Print the key types as standard key algorithm strings.
rGed62b74a175e gpgsm: Create ECC certificates with AKI and SKI by default.
rG5ae2632002c0 gpgsm: Support decryption of ECDH data
rG8b2c55d3c5da gpgsm: Remove restriction of key generation (only RSA).
rG37a853d808f0 gpgsm: Support key generation with ECC.

Related Objects
Search...

Event Timeline

werner triaged this task as High priority.Oct 20 2022, 2:32 PM
werner created this task.
werner created this object with edit policy "Contributor (Project)".
werner added a subtask: T6252: Support ECC for Netkey cards also in 2.2.
werner added a commit: rG37a853d808f0: gpgsm: Support key generation with ECC..Oct 20 2022, 5:34 PM
werner added a commit: rG8b2c55d3c5da: gpgsm: Remove restriction of key generation (only RSA)..
werner added a commit: rG5ae2632002c0: gpgsm: Support decryption of ECDH data.
werner added a commit: rG9f1181e1a7ed: gpgsm: Print the key types as standard key algorithm strings..
werner added a commit: rGed62b74a175e: gpgsm: Create ECC certificates with AKI and SKI by default..
werner moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Oct 28 2022, 9:48 AM
werner added a commit: rGd770715e1574: gpgsm: Allow ECC encryption keys with just keyAgreement specified..Oct 28 2022, 12:18 PM
werner added a commit: rG28467f3735f7: sm: Support encryption using ECDH keys..Oct 28 2022, 3:22 PM
werner added a commit: rGfd0ddf26990d: gpgsm: New compatibility flag "allow-ecc-encr"..
werner changed the task status from Open to Testing.Oct 28 2022, 3:32 PM
werner moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.
werner closed subtask T6252: Support ECC for Netkey cards also in 2.2 as Resolved.
werner added a commit: rG266a6602f0c9: gpgsm: Some more ECC support backported..Nov 15 2022, 2:57 PM
werner added a commit: rG7c3aeb2a57ea: gpgsm: Support signing using ECDSA..
werner moved this task from Backlog to For next release on the gnupg (gpg22) board.Jan 19 2023, 4:34 PM
werner edited projects, added gnupg22; removed gnupg (gpg22).
werner moved this task from Backlog to QA on the gnupg22 board.May 2 2023, 2:51 PM
ebo moved this task from QA to WiP on the gnupg22 board.Sep 14 2023, 3:08 PM
ebo added a subscriber: ebo.

pkcs12 import should be backported, too

ebo moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Sep 28 2023, 1:20 PM
werner moved this task from WiP to QA on the gnupg22 board.Oct 5 2023, 11:29 AM

That has been done modulo the bug which existed for both versions, I fixed today (T6536)

werner added a commit: rG2e7a08a82944: sm: Support import of PKCS#12 encoded ECC private keys..Oct 17 2023, 4:44 PM
werner added a commit: rGafacacec129c: sm: Flag Brainpool curves as compliant..Oct 24 2023, 2:22 PM
werner added a commit: rG97708e2ac722: sm: Flag Brainpool curves as compliant..
werner added a commit: rGf0e127defb87: sm: Flag Brainpool curves as compliant for all other operations..Oct 24 2023, 2:51 PM
werner added a commit: rG2c3c049fd8a0: sm: Flag Brainpool curves as compliant for all other operations..Oct 24 2023, 2:54 PM
werner added a comment.Oct 24 2023, 2:55 PM

T6536 has been fixed. With today's commits the Brainpool curves are now also flagged as compliant in gpgsm.

werner removed werner as the assignee of this task.Oct 24 2023, 2:55 PM
ebo closed this task as Resolved.Oct 30 2023, 3:24 PM
ebo claimed this task.
ebo moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.

works: my brainpool X509 testcertificate is shown as compliant

ebo moved this task from QA to gnupg-2.2.42 on the gnupg22 board.Oct 30 2023, 3:24 PM
ebo edited projects, added gnupg22 (gnupg-2.2.42); removed gnupg22.
werner mentioned this in T6307: Release GnuPG 2.2.42.Tue, Nov 28, 4:59 PM