Maniphest T6535

Failure to export plaintext v5 secret key.
Open, NormalPublic
Actions

Assigned To
None
Authored By
onickolay
Jun 13 2023, 2:42 PM
Tags
Subscribers
onickolay
• werner

Description

I'm investigating GnuPG v5 functionality, so modified GnuPG sources to always generate v5 keys. This works (including using generated keys with GnuPG 2.4.0), however attempt to export non-encrypted secret key fails, producing the following packet dump for RSA key:

# off=0 ctb=95 tag=5 hlen=3 plen=2921
:secret key packet:
	version 5, algo 1, created 1686657810, expires 0, pkbytes 391
	pkey[0]: [3072 bits]
	pkey[1]: [17 bits]
	protbytes: 0
	skbytes: 201210263
	skey[2]: [MPI_NULL]
	skey[3]: [2685 bits]
	skey[4]: [MPI_NULL]
	skey[5]: [MPI_NULL]
# off=2924 ctb=b4 tag=13 hlen=2 plen=6
:user ID packet: "v5_rsa"

For encrypted secret key export/import back works well.

Details

Version
2.4.0

Event Timeline

onickolay created this task.Jun 13 2023, 2:42 PM
onickolay updated the task description. (Show Details)
• werner added a project: gnupg24.Jun 13 2023, 7:41 PM
• werner added a subscriber: • werner.

Thanks, we will take care of this.

I general think it will be better if we use the new OCB format for exporting secret v5 keys. m However, this has not yet been implemented.

• werner triaged this task as Normal priority.Jun 13 2023, 7:41 PM