I do not wonder, that you face difficulties to reproduce it. It happened only with one card from my six cards; so five cards working fine. Therefore, I thought that this particular card was may dead at arrival and I contacted the vendor. They refused to replace it with the comment, it would be a well known issue. Do you know a test where I can demonstrate that the card is dead at arrival?

Fri, Jul 19, 8:21 AM · scd, Bug Report

gniibe added a comment to T4614: GPG: Cancel on pinpad hangs decryption process for 20 seconds.

It responds somehow, but the content has invalid data of (bChainParameter=0x04):

2019-07-05 09:36:41 scdaemon[71407] DBG: chan_17 -> S LOGIN-DATA aheinecke
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver: PC_to_RDR_XfrBlock:
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   dwLength ..........: 9
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSlot .............: 0
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSeq ..............: 21
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bBWI ..............: 0x04
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   wLevelParameter ...: 0x0000
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   [0010]  00 40 05 00 CA 00
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   [0016]  6E 00 E1
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver: RDR_to_PC_DataBlock:
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   dwLength ..........: 4
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSlot .............: 0
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSeq ..............: 21
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bStatus ...........: 0
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bChainParameter ...: 0x04
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   [0010]  00 82 00 82
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver: PC_to_RDR_XfrBlock:
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   dwLength ..........: 9
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSlot .............: 0
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSeq ..............: 22
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bBWI ..............: 0x04
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   wLevelParameter ...: 0x0000
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   [0010]  00 40 05 00 CA 00
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   [0016]  6E 00 E1
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver: RDR_to_PC_DataBlock:
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   dwLength ..........: 4
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSlot .............: 0
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSeq ..............: 22
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bStatus ...........: 0
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bChainParameter ...: 0x04
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   [0010]  00 82 00 82
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver: PC_to_RDR_XfrBlock:
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   dwLength ..........: 9
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSlot .............: 0
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSeq ..............: 23
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bBWI ..............: 0x04
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   wLevelParameter ...: 0x0000
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   [0010]  00 40 05 00 CA 00
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   [0016]  6E 00 E1
2019-07-05 09:36:46 scdaemon[71407] DBG: ccid-driver: usb_bulk_read error: LIBUSB_ERROR_TIMEOUT
2019-07-05 09:36:46 scdaemon[71407] ccid_transceive failed: (0x1000a)
2019-07-05 09:36:46 scdaemon[71407] apdu_send_simple(1) failed: card I/O error

Fri, Jul 19, 8:05 AM · scd, gnupg

gniibe added a comment to T4614: GPG: Cancel on pinpad hangs decryption process for 20 seconds.

After the cancellation, the card reader seems being screwed up:

Fri, Jul 19, 8:02 AM · scd, gnupg

gniibe added a comment to T4614: GPG: Cancel on pinpad hangs decryption process for 20 seconds.

It is canceled:

2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver: RDR_to_PC_DataBlock:
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   dwLength ..........: 0
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSlot .............: 0
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bSeq ..............: 19
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bStatus ...........: 64
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver:   bError ............: 239
2019-07-05 09:36:41 scdaemon[71407] DBG: ccid-driver: CCID command failed: PIN cancelled
2019-07-05 09:36:41 scdaemon[71407] DBG: dismiss pinpad entry prompt
2019-07-05 09:36:41 scdaemon[71407] DBG: chan_7 -> INQUIRE DISMISSPINPADPROMPT
2019-07-05 09:36:41 scdaemon[71407] DBG: chan_7 <- END
2019-07-05 09:36:41 scdaemon[71407] verify CHV2 failed: Invalid response
2019-07-05 09:36:41 scdaemon[71407] operation decipher result: Invalid response
2019-07-05 09:36:41 scdaemon[71407] app_decipher failed: Invalid response
2019-07-05 09:36:41 scdaemon[71407] DBG: chan_7 -> ERR 100663372 Invalid response <SCD>

Fri, Jul 19, 8:01 AM · scd, gnupg

gniibe removed a project from T4631: Difficulties to generate key on OpenPGP Smart Card V3.3: OpenPGP.

Please note that key generation is takes time unusually longer from a viewpoint of card reader.
It is possible for a card reader to give up the execution of key generation command as timeout.

Fri, Jul 19, 6:40 AM · scd, Bug Report

gniibe committed rG98f4eff7ffde: card: Fix showing KDF object attribute. (authored by gniibe).

card: Fix showing KDF object attribute.

Fri, Jul 19, 6:29 AM

gniibe committed rG57565d5f975d: scd: Support "[CHV3]" attribute for keyid string. (authored by gniibe).

scd: Support "[CHV3]" attribute for keyid string.

Fri, Jul 19, 6:25 AM

gniibe committed rG9c0cd9d07546: card: Support disabling KDF functionality. (authored by gniibe).

card: Support disabling KDF functionality.

Fri, Jul 19, 6:25 AM

gniibe claimed T4631: Difficulties to generate key on OpenPGP Smart Card V3.3.

I am trying to reproduce your problem with my 3.3 card using my TTXS card reader.

Fri, Jul 19, 3:37 AM · scd, Bug Report

gniibe triaged T4643: gpgrt: enable the environment to set compiler and linker flags for helper tools as Normal priority.

Fri, Jul 19, 3:05 AM · gpgrt, Feature Request

gniibe claimed T4643: gpgrt: enable the environment to set compiler and linker flags for helper tools.

Thank you. Merged.

Fri, Jul 19, 3:04 AM · gpgrt, Feature Request

gniibe added a comment to T4619: Unable to decrypt symmetric-key encrypted data.

Sorry, perhaps, I misunderstood how SKESK packets are generated in your application.
I was considering there were 256 recipients.

Fri, Jul 19, 2:12 AM · gnupg (gpg22), Bug Report

Thu, Jul 18

gniibe added a comment to T4619: Unable to decrypt symmetric-key encrypted data.

If the use of GnuPG (current implementation) is a condition, I think that you could improve the generation of SKESK packets, so that no other passphrase can not let gpg misunderstand as it may decrypt encrypted packet.

Thu, Jul 18, 11:48 PM · gnupg (gpg22), Bug Report

stm added a comment to T4619: Unable to decrypt symmetric-key encrypted data.

Unfortunately, for my use case the corresponding SKESK packet number is not known when calling GnuPG.

Thu, Jul 18, 11:02 PM · gnupg (gpg22), Bug Report

stm awarded T4644: gpg: implent keybox compression run a Like token.

Thu, Jul 18, 10:53 PM · Bug Report

ilf created T4644: gpg: implent keybox compression run.

Thu, Jul 18, 9:33 PM · Bug Report

JW-D added a comment to T4631: Difficulties to generate key on OpenPGP Smart Card V3.3.

I use the internal driver.

Thu, Jul 18, 8:37 PM · scd, Bug Report

jukivili committed rC320ed4796303: Fix use of AVX instruction in SHA1/SSSE3 assembly (authored by jukivili).

Fix use of AVX instruction in SHA1/SSSE3 assembly

Thu, Jul 18, 7:57 PM

slandden updated subscribers of T4630: libgcrypt: POWER GHASH Vector Acceleration.

@werner I would be willing to share 20% to the reviewer of my patches. (or 25% in this case, as @jwilk went through the effort to even write a test to point out a bug in my code). However, so far that has been entirely @jwilk who has been reviewing my patches.

Thu, Jul 18, 5:59 PM · Feature Request, libgcrypt

dkg committed rE732855a48370: build: Use {CFLAGS,CPPFLAGS, LDFLAGS}_FOR_BUILD for helper programs (authored by dkg).

build: Use {CFLAGS,CPPFLAGS, LDFLAGS}_FOR_BUILD for helper programs

Thu, Jul 18, 5:49 PM

dkg added a commit to T4643: gpgrt: enable the environment to set compiler and linker flags for helper tools: rE732855a48370: build: Use {CFLAGS,CPPFLAGS, LDFLAGS}_FOR_BUILD for helper programs.

Thu, Jul 18, 5:49 PM · gpgrt, Feature Request

dkg added a comment to T4643: gpgrt: enable the environment to set compiler and linker flags for helper tools.

I've just pushed rE732855a483709345a5c0f49504f45cb8da3f883a to dkg-fix-T4643 in the gpg-error git repository. I don't know why it is not yet visible here.

Thu, Jul 18, 5:31 PM · gpgrt, Feature Request

dkg created T4643: gpgrt: enable the environment to set compiler and linker flags for helper tools.

Thu, Jul 18, 5:21 PM · gpgrt, Feature Request

dkg added commits to T4641: Libassuan: enable the environment to set compiler and linker flags for helper tools: rA45f01593d4ce: pass through {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD when creating helper programs, rA98d7c7ea3f37: build: Use {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD for helper programs..

Thu, Jul 18, 4:37 PM · libassuan, Feature Request

dkg added a task to rA45f01593d4ce: pass through {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD when creating helper programs: T4641: Libassuan: enable the environment to set compiler and linker flags for helper tools.

Thu, Jul 18, 4:37 PM

dkg added a task to rA98d7c7ea3f37: build: Use {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD for helper programs.: T4641: Libassuan: enable the environment to set compiler and linker flags for helper tools.

Thu, Jul 18, 4:37 PM

dkg added a comment to rA98d7c7ea3f37: build: Use {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD for helper programs..

CC_FOR_BUILD is defined in configure.ac as build system C compiler, not build system C compiler and flags.

Thu, Jul 18, 4:35 PM

dkg added a comment to T4628: new import-clean default for keys from keyservers modifies the local keyring when anything is returned.

I'm aware of you releasing an RC for comments, and i apologize for not catching this particular case earlier. As you know from T4607, i was even advocating for it. i didn't understand the full implications of the "import-then-clean" approach at the time, and was thinking it would only apply to the incoming material, not the stored material.

Thu, Jul 18, 4:26 PM · Keyserver, gnupg (gpg22), Bug Report

werner committed rGe07584b52307: doc: Fix a debug hint on the keybox format. (authored by werner).

doc: Fix a debug hint on the keybox format.

Thu, Jul 18, 2:12 PM

werner committed rG824ca6f042dc: kbx: Allow "gpgsm --faked-system-time" to kick off a compression run. (authored by werner).

kbx: Allow "gpgsm --faked-system-time" to kick off a compression run.

Thu, Jul 18, 2:00 PM

efraim created T4642: gpa searches for gpg2keys_ldap, should be dirmngr_ldap in the S1 Public space.

Thu, Jul 18, 11:37 AM · gpa

werner edited projects for T4631: Difficulties to generate key on OpenPGP Smart Card V3.3, added: scd, OpenPGP; removed Info Needed.

Are you using pcscd (is that process running) or the internal driver.? Please try the latter if you are not already using it.

Thu, Jul 18, 11:15 AM · scd, Bug Report

werner triaged T4633: gpg argument "--passphrase=" yields 'missing argument for option "--passphrase="' as High priority.

Thu, Jul 18, 11:13 AM · gnupg (gpg22), Bug Report

werner triaged T4634: "gpg --quiet --quick-gen-key" is not quiet: emits "key $FPR marked as ultimately trusted" to stderr. as Wishlist priority.

Thu, Jul 18, 11:11 AM · gnupg (gpg22), Bug Report

werner triaged T4640: Outdated text and links at <http://git.gnupg.org/> as Normal priority.

Thu, Jul 18, 11:10 AM · gpgweb, Bug Report

werner edited projects for T4640: Outdated text and links at <http://git.gnupg.org/>, added: gpgweb; removed Trash, Documentation.

Thu, Jul 18, 11:10 AM · gpgweb, Bug Report

werner added a comment to T4628: new import-clean default for keys from keyservers modifies the local keyring when anything is returned.

The code has comments why we do a first clean_key on the imported keyblock.

Thu, Jul 18, 11:07 AM · Keyserver, gnupg (gpg22), Bug Report

werner added a comment to rA98d7c7ea3f37: build: Use {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD for helper programs..

I wonder why the flags can't go into CC_FOR_BUILD.

Thu, Jul 18, 10:59 AM

gniibe committed rPTH6b8ed75b40e6: build: Add -no-install for LDFLAGS of test programs. (authored by gniibe).

build: Add -no-install for LDFLAGS of test programs.

Thu, Jul 18, 8:55 AM

gniibe added a commit to T4298: 'make check' with uninstalled library, which is building now (even if rpath doesn't work well): rPTH2501a48930eb: build: With LD_LIBRARY_PATH defined, use --disable-new-dtags..

Thu, Jul 18, 8:55 AM

gniibe committed rPTH2501a48930eb: build: With LD_LIBRARY_PATH defined, use --disable-new-dtags. (authored by gniibe).

build: With LD_LIBRARY_PATH defined, use --disable-new-dtags.

Thu, Jul 18, 8:55 AM

JW-D added a comment to T4631: Difficulties to generate key on OpenPGP Smart Card V3.3.

All my keys are RSA 4096. It worked fine with OpenPGP smart cards and with two Yubikey 5. On all devices a set of RSA 4096 keys were geneated on the device itself. Only one card failed. But even the card which failed, generated at least the signature key in RSA 4096.

Thu, Jul 18, 8:18 AM · scd, Bug Report

gniibe added a project to T4631: Difficulties to generate key on OpenPGP Smart Card V3.3: Info Needed.

Please let us know what kind of key and how large, like RSA-4096 or ECC Brainpool.
For RSA 2048 or larger, yes, it takes too long.

Thu, Jul 18, 7:47 AM · scd, Bug Report

gniibe triaged T4641: Libassuan: enable the environment to set compiler and linker flags for helper tools as Normal priority.

Thu, Jul 18, 7:41 AM · libassuan, Feature Request

gniibe claimed T4641: Libassuan: enable the environment to set compiler and linker flags for helper tools.

Thanks.
Merged (with line break in the Makefile.am and formatting of commit message.

Thu, Jul 18, 7:39 AM · libassuan, Feature Request

gniibe committed rA98d7c7ea3f37: build: Use {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD for helper programs. (authored by dkg).

build: Use {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD for helper programs.

Thu, Jul 18, 7:37 AM

gniibe added a comment to T4619: Unable to decrypt symmetric-key encrypted data.

I mean, if all SKESK packets should be tried, we need some larger surgery of current implementation.

Thu, Jul 18, 5:07 AM · gnupg (gpg22), Bug Report

gniibe added a comment to T4619: Unable to decrypt symmetric-key encrypted data.

Is it possible for your application (DOTS), to specify the packet number for SKESKP, not trying all SKESK packets?

gpg-master-change-to-specify-symkey-packet.diff2 KB

^-- with this change, we can decrypt the skesks.asc with --passphrase-repeat=169, and skesks2.asc with --passphrase-repeat=30

Thu, Jul 18, 5:05 AM · gnupg (gpg22), Bug Report

gniibe committed rG44be675b759d: gpg: More check for symmetric key encryption. (authored by gniibe).

gpg: More check for symmetric key encryption.

Thu, Jul 18, 4:05 AM

dkg committed rA45f01593d4ce: pass through {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD when creating helper programs (authored by dkg).

pass through {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD when creating helper programs

Thu, Jul 18, 12:57 AM

dkg added a comment to T4628: new import-clean default for keys from keyservers modifies the local keyring when anything is returned.

i've merged a variant of rGbe99eec2b105eb5f8e3759147ae351dcc40560ad into the GnuPG packaging in debian unstable as of version 2.2.17-3 to avoid the risks of data loss and signature verification failures. I'll revert it if i see the concern addressed upstream.

Thu, Jul 18, 12:17 AM · Keyserver, gnupg (gpg22), Bug Report

Wed, Jul 17

dkg added a comment to T4592: gpg takes > 30s to list the keys from a 17MiB `pubring.gpg` that contains a single certificate.

@gniibe, thank you for backporting this to STABLE-BRANCH-2-2!

Wed, Jul 17, 10:25 PM · gnupg (gpg23), Bug Report

dkg added a task to rG33c17a8008c3: gpg: Improve import slowness.: T4592: gpg takes > 30s to list the keys from a 17MiB `pubring.gpg` that contains a single certificate.

Wed, Jul 17, 10:24 PM

dkg added a task to rGeb00a14f6d2d: gpg: Improve import slowness.: T4592: gpg takes > 30s to list the keys from a 17MiB `pubring.gpg` that contains a single certificate.

Wed, Jul 17, 10:24 PM

dkg added commits to T4592: gpg takes > 30s to list the keys from a 17MiB `pubring.gpg` that contains a single certificate: rGeb00a14f6d2d: gpg: Improve import slowness., rG33c17a8008c3: gpg: Improve import slowness..

Wed, Jul 17, 10:24 PM · gnupg (gpg23), Bug Report

dkg added a comment to T4641: Libassuan: enable the environment to set compiler and linker flags for helper tools.

I don't know why dkg-fix-T4641 is not showing up here on the assuan git repo.

Wed, Jul 17, 9:11 PM · libassuan, Feature Request

stm added a comment to T3389: canonical OpenPGP certificate export.

@dkg You are right. The term "issuer" was too ambiguous.
I like your proposal and would try to implement it. However, "export" of dkg-keycheck and other programs from DKGPG are very limited.

Wed, Jul 17, 8:53 PM · gnupg (gpg23), Feature Request

stm added a comment to T4619: Unable to decrypt symmetric-key encrypted data.

But that's exactly my use case in DOTS: an easily to create 'decryption puzzle' (including the hardness of iterated and salted S2K) for the serving party in order to make DoS harder. I don't see how public-key crypto can help here. Moreover, I would keep the user interaction as cheap as possible, i.e., copy'n'paste an ASCII-armored message and passwort to GnuPG without importing public keys etc.

Wed, Jul 17, 8:34 PM · gnupg (gpg22), Bug Report

dkg added a comment to T4641: Libassuan: enable the environment to set compiler and linker flags for helper tools.

I've just pushed rA45f01593d4ce794ae3562359aee2ff80c97e368e to the dkg-fix-T4641 branch that resolves this.

Wed, Jul 17, 7:31 PM · libassuan, Feature Request

dkg created T4641: Libassuan: enable the environment to set compiler and linker flags for helper tools.

Wed, Jul 17, 7:29 PM · libassuan, Feature Request

dkg added a comment to T4632: Make it easier to cross-compile gpg-error.

Thanks for the feedback. I'll go ahead and close any tickets that come in via debian that expect to be able to cross compile without having at least once had a native compiler on the platform to generate the appropriate lock-obj-pub-*.h.

Wed, Jul 17, 7:05 PM · gpgrt, Feature Request

olf created T4640: Outdated text and links at <http://git.gnupg.org/>.

Wed, Jul 17, 5:01 PM · gpgweb, Bug Report

aheinecke created T4639: GpgOL: Plain Text mails are classified as HTML after decryption by GpgOL.

Wed, Jul 17, 4:51 PM · gpg4win, gpgol

werner added a comment to T4619: Unable to decrypt symmetric-key encrypted data.

The problem here is that trial decryption may cost a lot of time because of the passphrase KDF function which, on purpose, takes long. There is one exception: A simple S2K (algo 0) takes no time and its use makes sense iff the passphrase has been created directly as a random string. However, I do not see the use cases for of a set of many passphrases compared to just use public key crypto.

Wed, Jul 17, 12:19 PM · gnupg (gpg22), Bug Report

werner closed T4632: Make it easier to cross-compile gpg-error as Wontfix.

In fact this specific scheme of indirect access to pthread objects is there to minimize dependencies of libgpg-error. It makes cross-compiling a bit harder but that is anyway the case because you need to check a lot of things for a new platform.

Wed, Jul 17, 12:12 PM · gpgrt, Feature Request

Recent ActivityActivePublicView PanelActions

Details

Recent Activity

Sat, Jul 20

Fri, Jul 19

Thu, Jul 18

Wed, Jul 17

Recent Activity
ActivePublic
View Panel
Actions