Maniphest T6253

GpgSM: Backport ECC support to 2.2
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• werner
	Oct 20 2022, 2:32 PM

Tags

Subscribers

Description

We should have full ECC support in gpgsm 2.2 so that we can use ECC cards.

Revisions and Commits

rG GnuPG
	rG2c3c049fd8a0 sm: Flag Brainpool curves as compliant for all other operations.
	rGf0e127defb87 sm: Flag Brainpool curves as compliant for all other operations.
	rG97708e2ac722 sm: Flag Brainpool curves as compliant.
	rGafacacec129c sm: Flag Brainpool curves as compliant.
	rG2e7a08a82944 sm: Support import of PKCS#12 encoded ECC private keys.
	rG7c3aeb2a57ea gpgsm: Support signing using ECDSA.
	rG266a6602f0c9 gpgsm: Some more ECC support backported.
	rGfd0ddf26990d gpgsm: New compatibility flag "allow-ecc-encr".
	rG28467f3735f7 sm: Support encryption using ECDH keys.
	rGd770715e1574 gpgsm: Allow ECC encryption keys with just keyAgreement specified.
	rG9f1181e1a7ed gpgsm: Print the key types as standard key algorithm strings.
	rGed62b74a175e gpgsm: Create ECC certificates with AKI and SKI by default.
	rG5ae2632002c0 gpgsm: Support decryption of ECDH data
	rG8b2c55d3c5da gpgsm: Remove restriction of key generation (only RSA).
	rG37a853d808f0 gpgsm: Support key generation with ECC.

Related Objects
Search...

		Status	Assigned	Task
		Resolved	• werner	T4098 GpgSM: Add ECC support
		Resolved	• ebo	T6253 GpgSM: Backport ECC support to 2.2
		Resolved	• werner	T6252 Support ECC for Netkey cards also in 2.2

Event Timeline

• werner triaged this task as High priority.Oct 20 2022, 2:32 PM

• werner created this task.

• werner created this object with edit policy "Contributor (Project)".

• werner added a subtask: T6252: Support ECC for Netkey cards also in 2.2.

• werner added a commit: rG37a853d808f0: gpgsm: Support key generation with ECC..Oct 20 2022, 5:34 PM

• werner added a commit: rG8b2c55d3c5da: gpgsm: Remove restriction of key generation (only RSA)..

• werner added a commit: rG5ae2632002c0: gpgsm: Support decryption of ECDH data.

• werner added a commit: rG9f1181e1a7ed: gpgsm: Print the key types as standard key algorithm strings..

• werner added a commit: rGed62b74a175e: gpgsm: Create ECC certificates with AKI and SKI by default..

• werner moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Oct 28 2022, 9:48 AM

• werner added a commit: rGd770715e1574: gpgsm: Allow ECC encryption keys with just keyAgreement specified..Oct 28 2022, 12:18 PM

• werner added a commit: rG28467f3735f7: sm: Support encryption using ECDH keys..Oct 28 2022, 3:22 PM

• werner added a commit: rGfd0ddf26990d: gpgsm: New compatibility flag "allow-ecc-encr"..

• werner changed the task status from Open to Testing.Oct 28 2022, 3:32 PM

• werner moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.

• werner closed subtask T6252: Support ECC for Netkey cards also in 2.2 as Resolved.

• werner added a commit: rG266a6602f0c9: gpgsm: Some more ECC support backported..Nov 15 2022, 2:57 PM

• werner added a commit: rG7c3aeb2a57ea: gpgsm: Support signing using ECDSA..

• werner moved this task from Backlog to For next release on the gnupg (gpg22) board.Jan 19 2023, 4:34 PM

• werner edited projects, added gnupg22; removed gnupg (gpg22).

• werner moved this task from Backlog to QA on the gnupg22 board.May 2 2023, 2:51 PM

pkcs12 import should be backported, too

• ebo moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Sep 28 2023, 1:20 PM

That has been done modulo the bug which existed for both versions, I fixed today (T6536)

• werner added a commit: rG2e7a08a82944: sm: Support import of PKCS#12 encoded ECC private keys..Oct 17 2023, 4:44 PM

• werner added a commit: rGafacacec129c: sm: Flag Brainpool curves as compliant..Oct 24 2023, 2:22 PM

• werner added a commit: rG97708e2ac722: sm: Flag Brainpool curves as compliant..

• werner added a commit: rGf0e127defb87: sm: Flag Brainpool curves as compliant for all other operations..Oct 24 2023, 2:51 PM

• werner added a commit: rG2c3c049fd8a0: sm: Flag Brainpool curves as compliant for all other operations..Oct 24 2023, 2:54 PM

T6536 has been fixed. With today's commits the Brainpool curves are now also flagged as compliant in gpgsm.

• werner removed • werner as the assignee of this task.Oct 24 2023, 2:55 PM

works: my brainpool X509 testcertificate is shown as compliant

• ebo moved this task from QA to gnupg-2.2.42 on the gnupg22 board.Oct 30 2023, 3:24 PM

• ebo edited projects, added gnupg22 (gnupg-2.2.42); removed gnupg22.

• werner mentioned this in T6307: Release GnuPG 2.2.42.Nov 28 2023, 4:59 PM