Page MenuHome GnuPG
Create Task
Maniphest T7397

Kleopatra: Support Kyber generation
Closed, ResolvedPublic
Actions

Description

We need two things here:

  • Allow the generation of Kyber keys.
  • Restrict this in vs-de mode to ky768_bp256 and ky1024_bp384

The listing of algorithms should already work with gpgme and gnupg26 from master. For the generation an appropriate parameter file as shown below needs to be provided.

Key-Type: ECDSA
Key-Curve: brainpoolP256r1
Subkey-Type: kyber
Subkey-Length: 768
Subkey-Curve: brainpoolP256r1
Name-Real: Lord Helmchen

Revisions and Commits

rLIBKLEO Libkleo
rLIBKLEO45d1ebd94a30 Return raw algorithm name if we don't know a pretty one
rLIBKLEOaa5ad3644709 Return raw algorithm name if we don't know a pretty one
rLIBKLEO3c9a01943e34 Allow generating Kyber keys
rG GnuPG
rG996e8ae3cb09 gpg: Allow "Kyber" as algorithm for the Subkey-Type keyword.
rM GPGME
rM56718f8d204f cpp: Add Kyber algorithm

Related Objects
Search...

StatusAssignedTask
 OpenNoneT6636 PQC Implementation
 Resolved• ikloeckerT7397 Kleopatra: Support Kyber generation

Event Timeline

• werner triaged this task as High priority.Nov 14 2024, 2:22 PM
• werner created this task.
• werner created this object with edit policy "Contributor (Project)".
• werner added a commit: rG996e8ae3cb09: gpg: Allow "Kyber" as algorithm for the Subkey-Type keyword..Nov 14 2024, 2:24 PM
• ikloecker mentioned this in T7394: Kleopatra: RSA-1024 is shown as "Unknown algorithm" in the certificate list .Nov 14 2024, 4:10 PM
• ikloecker added a commit: rM56718f8d204f: cpp: Add Kyber algorithm.Nov 14 2024, 4:23 PM
• ikloecker added a commit: rLIBKLEO3c9a01943e34: Allow generating Kyber keys.
• ikloecker added a commit: rLIBKLEOaa5ad3644709: Return raw algorithm name if we don't know a pretty one.Nov 14 2024, 4:29 PM
• ikloecker renamed this task from Support Kyber generation in Kleopatra to Kleopatra: Support Kyber generation.Nov 14 2024, 4:38 PM
• ikloecker changed the task status from Open to Testing.
• ikloecker moved this task from Backlog to WIP on the gpd5x board.

Ready for testing. Note that you also need gpgme master.

• ikloecker added a commit: rLIBKLEO45d1ebd94a30: Return raw algorithm name if we don't know a pretty one.Nov 20 2024, 5:40 PM
• werner closed this task as Resolved.EditedDec 4 2024, 2:46 PM
• werner moved this task from WIP to Done on the gpd5x board.

Works for me in an NSIS installer. The VSD beta thing also works with copied conf files.
(gpg4win-5.0.0-beta27 with some local mods)