Maniphest T7698

Add support of secp256k1 for KEM API
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• gniibe
	Jun 25 2025, 3:19 AM

Tags

Subscribers

Description

GnuPG 2.5 has moved to use KEM API for its ECC encryption/decryption.
libgcrypt should support secp256k1 for KEM API.

I don't think it's supported by FIPS, but it's defined by SEC standard.

Revisions and Commits

rG GnuPG
	rG944494978090 common: Remove openpgp_oid_to_kem_algo.
	rG5efabec21883 gpg:ecc: Use the common function of gnupg_get_ecc_params.
	rG5ab9d59ee19e common:ecc: Have a field if the curve of ECC is Weierstrass.
rC libgcrypt
	rCe9b1c3ec91a1 cipher:kem: Provide each enum constant as macro.
	rC10c0ce88ba3f cipher:kem:ecc: Support secp256k1 by KEM API.

Related Objects
Search...

		Status	Assigned	Task
		Testing	• gniibe	T7649 gnupg: Use KEM interface for encryption/decryption
		Resolved	• gniibe	T7698 Add support of secp256k1 for KEM API

Event Timeline

• gniibe triaged this task as High priority.Jun 25 2025, 3:19 AM

• gniibe created this task.

• gniibe added a commit: rC10c0ce88ba3f: cipher:kem:ecc: Support secp256k1 by KEM API..Jun 26 2025, 4:15 AM

• gniibe changed the task status from Open to Testing.Jun 26 2025, 6:49 AM

• gniibe added a commit: rCe9b1c3ec91a1: cipher:kem: Provide each enum constant as macro..Fri, Jul 4, 2:55 AM

• gniibe added a commit: rG5ab9d59ee19e: common:ecc: Have a field if the curve of ECC is Weierstrass..Fri, Jul 4, 7:38 AM

• gniibe added a commit: rG5efabec21883: gpg:ecc: Use the common function of gnupg_get_ecc_params..

• gniibe added a commit: rG944494978090: common: Remove openpgp_oid_to_kem_algo..

• werner mentioned this in T7695: Release GnuPG 2.5.9.Thu, Jul 10, 4:35 PM

Should be fixed with 2.5.9. Given that secp256 is an esoteric curve for GnuPG it does not make sense to run the entire QA process.