Page MenuHome GnuPG
Feed Advanced Search

Jan 30 2026

gniibe committed rC0ddc823e331c: build: New configure option --with-libtool-modification. (authored by gniibe).
build: New configure option --with-libtool-modification.
Jan 30 2026, 10:42 AM
gniibe committed rC45c992020168: rsa: Fix decoding of PKCS#1 v1.5 and OAEP padding. (authored by gniibe).
rsa: Fix decoding of PKCS#1 v1.5 and OAEP padding.
Jan 30 2026, 10:42 AM
gniibe committed rCe8072d8d3255: const-time: Use ct_not_memequal, instead. Tested with AVR. (authored by gniibe).
const-time: Use ct_not_memequal, instead. Tested with AVR.
Jan 30 2026, 10:42 AM
gniibe committed rCfee1e63c7286: build: Check if arch is VAX or compiler is MSVC. (authored by gniibe).
build: Check if arch is VAX or compiler is MSVC.
Jan 30 2026, 10:42 AM
gniibe committed rC2839aaee3e6e: cipher: Fix ElGamal decryption. (authored by gniibe).
cipher: Fix ElGamal decryption.
Jan 30 2026, 10:42 AM
gniibe committed rCc98b5e4a1471: rsa: Use memmov_independently when unpadding. (authored by gniibe).
rsa: Use memmov_independently when unpadding.
Jan 30 2026, 10:42 AM
gniibe committed rC45945be8f3c3: const-time: Add ct_memmov_cond, fix _gcry_mpih_set_cond. (authored by gniibe).
const-time: Add ct_memmov_cond, fix _gcry_mpih_set_cond.
Jan 30 2026, 10:42 AM
gniibe committed rC892bc25ff74b: Use single constant-time memory comparison implementation (authored by jukivili).
Use single constant-time memory comparison implementation
Jan 30 2026, 10:42 AM
gniibe committed rC5e9ba851948f: const-time: always avoid comparison operator for byte comparison (authored by jukivili).
const-time: always avoid comparison operator for byte comparison
Jan 30 2026, 10:42 AM
gniibe committed rC3583e2ebcad5: rsa, elgamal: avoid logical not operator in constant-time code (authored by jukivili).
rsa, elgamal: avoid logical not operator in constant-time code
Jan 30 2026, 10:42 AM
gniibe committed rC3fa1b81c92e5: const-time: prefix global symbols with _gcry_ (authored by jukivili).
const-time: prefix global symbols with _gcry_
Jan 30 2026, 10:42 AM
gniibe committed rC7f0eb519897b: mpih_set_cond: restore EM leakage mitigation (authored by jukivili).
mpih_set_cond: restore EM leakage mitigation
Jan 30 2026, 10:42 AM
gniibe committed rC9c0984ed2c55: const-time: ct_memmov_cond: switch to use dual mask approach (authored by jukivili).
const-time: ct_memmov_cond: switch to use dual mask approach
Jan 30 2026, 10:42 AM
gniibe committed rC15cd08ae4c1e: mpih-const-time: use global vzero/vone variable (authored by jukivili).
mpih-const-time: use global vzero/vone variable
Jan 30 2026, 10:42 AM
gniibe committed rC6377725ed01e: mpiutil: use global vone and vzero (authored by jukivili).
mpiutil: use global vone and vzero
Jan 30 2026, 10:42 AM
gniibe committed rC610667fb2558: ec-nist: use global vone and vzero (authored by jukivili).
ec-nist: use global vone and vzero
Jan 30 2026, 10:42 AM
gniibe committed rC2ed340744746: ec-nist: avoid unintentional conditional branch by comparison (authored by jukivili).
ec-nist: avoid unintentional conditional branch by comparison
Jan 30 2026, 10:42 AM
gniibe committed rC9acddd8b95e1: mpih_cmp_ui: avoid unintentional conditional branch (authored by jukivili).
mpih_cmp_ui: avoid unintentional conditional branch
Jan 30 2026, 10:42 AM
gniibe committed rC237523b49f42: ec: avoid unintentional condition branches for 25519, 448 and 256k1 (authored by jukivili).
ec: avoid unintentional condition branches for 25519, 448 and 256k1
Jan 30 2026, 10:42 AM
gniibe committed rC01e7052cb245: const-time: add functions for generating masks from 0/1 input (authored by jukivili).
const-time: add functions for generating masks from 0/1 input
Jan 30 2026, 10:42 AM
gniibe committed rC74588de441fd: mpih-const-time: use constant-time comparisons conditional add/sub/abs (authored by jukivili).
mpih-const-time: use constant-time comparisons conditional add/sub/abs
Jan 30 2026, 10:42 AM
gniibe committed rC11973c2219da: mpih_mod: avoid unintentional conditional branch (authored by jukivili).
mpih_mod: avoid unintentional conditional branch
Jan 30 2026, 10:42 AM
gniibe committed rC75e9bcccb69a: mpi: Fix ECC computation on hppa. (authored by gniibe).
mpi: Fix ECC computation on hppa.
Jan 30 2026, 10:42 AM
gniibe committed rC28afad4517c7: random:jent: Fix for jent_rng_is_initialized. (authored by gniibe).
random:jent: Fix for jent_rng_is_initialized.
Jan 30 2026, 10:41 AM
gniibe committed rC67b528721e88: random:jent: Fix build with address sanitizer. (authored by gniibe).
random:jent: Fix build with address sanitizer.
Jan 30 2026, 10:41 AM
gniibe committed rCf3bad2deb024: cipher:kyber: No change ABI/API for gcry_kem_genkey. (authored by gniibe).
cipher:kyber: No change ABI/API for gcry_kem_genkey.
Jan 30 2026, 10:41 AM
gniibe committed rC1a82b26055e6: mpi: Use secure MPI in _gcry_mpi_assign_limb_space. (authored by gniibe).
mpi: Use secure MPI in _gcry_mpi_assign_limb_space.
Jan 30 2026, 10:41 AM
gniibe committed rC889126dde923: secmem: Handle HAVE_BROKEN_MLOCK for the case with ASAN. (authored by gniibe).
secmem: Handle HAVE_BROKEN_MLOCK for the case with ASAN.
Jan 30 2026, 10:41 AM
gniibe committed rC506219f031fd: Merge branch 'master' into LIBGCRYPT-1.11-BRANCH (authored by gniibe).
Merge branch 'master' into LIBGCRYPT-1.11-BRANCH
Jan 30 2026, 10:41 AM
gniibe committed rCa6267ad91dcd: Merge commit '4876a1a4' into LIBGCRYPT-1.11-BRANCH (authored by gniibe).
Merge commit '4876a1a4' into LIBGCRYPT-1.11-BRANCH
Jan 30 2026, 10:41 AM
gniibe committed rCd9ebc6c4e8b5: cipher:kem:ecc: Support secp256k1 by KEM API. (authored by gniibe).
cipher:kem:ecc: Support secp256k1 by KEM API.
Jan 30 2026, 10:41 AM
gniibe committed rCf7e06f8a29fc: cipher:kem: Provide each enum constant as macro. (authored by gniibe).
cipher:kem: Provide each enum constant as macro.
Jan 30 2026, 10:41 AM
gniibe committed rCacd0b4347002: build: Allow build with no Kyber. (authored by gniibe).
build: Allow build with no Kyber.
Jan 30 2026, 10:41 AM
gniibe committed rCd54d834eb434: build: More changes to allow build with no Kyber. (authored by gniibe).
build: More changes to allow build with no Kyber.
Jan 30 2026, 10:41 AM
gniibe committed rC7ebe90e5553b: cipher:ecc: Silence GCC 15 warning. (authored by gniibe).
cipher:ecc: Silence GCC 15 warning.
Jan 30 2026, 10:41 AM
gniibe committed rC448693047fac: cipher:rsa: Fix missing initialization in generate_fips. (authored by gniibe).
cipher:rsa: Fix missing initialization in generate_fips.
Jan 30 2026, 10:41 AM
gniibe committed rCaced8fd23236: mpi: Provide the function prototype of __udiv_qrnnd. (authored by gniibe).
mpi: Provide the function prototype of __udiv_qrnnd.
Jan 30 2026, 10:41 AM
gniibe committed rC013bcc18676d: Add missing abiversion tag for PowerPC assembly (authored by jukivili).
Add missing abiversion tag for PowerPC assembly
Jan 30 2026, 10:41 AM
gniibe committed rC210562de650d: Add missing machine tags for PowerPC assembly (authored by jukivili).
Add missing machine tags for PowerPC assembly
Jan 30 2026, 10:41 AM
gniibe committed rCc720dd8927a5: poly1305-p10le: use '.rodata' section for read-only data (authored by jukivili).
poly1305-p10le: use '.rodata' section for read-only data
Jan 30 2026, 10:41 AM
gniibe committed rCdb55dfb74e64: Mark nonstring use cases with __nonstring__ attribute. (authored by gniibe).
Mark nonstring use cases with __nonstring__ attribute.
Jan 30 2026, 10:41 AM
gniibe committed rCae80106fb9d3: random:jent: Fix for jent_rng_is_initialized. (authored by gniibe).
random:jent: Fix for jent_rng_is_initialized.
Jan 30 2026, 10:41 AM
gniibe committed rC5b260f28d2a5: random:jent: Fix build with address sanitizer. (authored by gniibe).
random:jent: Fix build with address sanitizer.
Jan 30 2026, 10:41 AM
gniibe committed rC5937b1730df8: mpi: Fix redefinition of types. (authored by gniibe).
mpi: Fix redefinition of types.
Jan 30 2026, 10:41 AM
gniibe committed rCa7aa18fff3cc: secmem: Handle HAVE_BROKEN_MLOCK for the case with ASAN. (authored by gniibe).
secmem: Handle HAVE_BROKEN_MLOCK for the case with ASAN.
Jan 30 2026, 10:41 AM
gniibe committed rC172968f52174: mpi: Introduce mpi_tfr and use it for point_tfr. (authored by gniibe).
mpi: Introduce mpi_tfr and use it for point_tfr.
Jan 30 2026, 10:41 AM
gniibe committed rCf9d5650ad2ea: t-kem: fix test loop iteration (authored by jukivili).
t-kem: fix test loop iteration
Jan 30 2026, 10:41 AM
gniibe committed rC06b590e6e537: cipher:aria: Fix compiler error on NetBSD. (authored by collinfunk).
cipher:aria: Fix compiler error on NetBSD.
Jan 30 2026, 10:41 AM
gniibe committed rC100efe24af52: Update autogen.sh and gpg-error.m4 from upstream. (authored by werner).
Update autogen.sh and gpg-error.m4 from upstream.
Jan 30 2026, 10:41 AM
gniibe committed rCd0da36c1e5fe: Update autogen.sh also for test(1) -o adjustment. (authored by werner).
Update autogen.sh also for test(1) -o adjustment.
Jan 30 2026, 10:41 AM
gniibe committed rC3e4eda9fe475: Adjust scripts for test(1) operator -a removal (authored by werner).
Adjust scripts for test(1) operator -a removal
Jan 30 2026, 10:41 AM
gniibe committed rCb17ed8d1af20: mceliece6688128f: fix stack overflow crash on win64/wine (authored by jukivili).
mceliece6688128f: fix stack overflow crash on win64/wine
Jan 30 2026, 10:41 AM
gniibe committed rCf4fda2acfaed: mceliece6688128f: fix UBSAN runtime errors (authored by jukivili).
mceliece6688128f: fix UBSAN runtime errors
Jan 30 2026, 10:41 AM
gniibe committed rC1aca19b89768: cipher-xts: harden mask generation against branch optimization (authored by jukivili).
cipher-xts: harden mask generation against branch optimization
Jan 30 2026, 10:41 AM
gniibe committed rCefa0e8fdee5c: rijndael: harden mask generation against branch optimization (authored by jukivili).
rijndael: harden mask generation against branch optimization
Jan 30 2026, 10:41 AM
gniibe committed rC689d0b1396d4: mpih-pow: harden condition calculation against branch optimization (authored by jukivili).
mpih-pow: harden condition calculation against branch optimization
Jan 30 2026, 10:41 AM
gniibe committed rC0df884de5e3c: kyber: harden mask generation against branch optimization (authored by jukivili).
kyber: harden mask generation against branch optimization
Jan 30 2026, 10:41 AM
gniibe committed rCcf1165c26ac8: sntrup761: harden mask generation against branch optimization (authored by jukivili).
sntrup761: harden mask generation against branch optimization
Jan 30 2026, 10:41 AM
gniibe committed rC7ff58b28726e: sntrup761: use const-time helpers for memory comparison and cond move (authored by jukivili).
sntrup761: use const-time helpers for memory comparison and cond move
Jan 30 2026, 10:41 AM
gniibe committed rC9e1ee6efea9d: mceliece6688128f: harden mask generation against branch optimization (authored by jukivili).
mceliece6688128f: harden mask generation against branch optimization
Jan 30 2026, 10:41 AM
gniibe committed rC379a0baffa85: const-time: add 64-bit fast paths for const-time buffer functions (authored by jukivili).
const-time: add 64-bit fast paths for const-time buffer functions
Jan 30 2026, 10:41 AM
gniibe committed rC3a281e0b045a: mceliece6688128f: use const-time helper for memory comparison (authored by jukivili).
mceliece6688128f: use const-time helper for memory comparison
Jan 30 2026, 10:41 AM
gniibe committed rC289c0a596fd3: Add stack burning for PQC algorithms (authored by jukivili).
Add stack burning for PQC algorithms
Jan 30 2026, 10:41 AM
gniibe committed rC5ba143d51f37: cipher:kyber: Apply a change from upstream. (authored by gniibe).
cipher:kyber: Apply a change from upstream.
Jan 30 2026, 10:41 AM
gniibe committed rC520c699c82e4: mpi: Use secure MPI in _gcry_mpi_assign_limb_space. (authored by gniibe).
mpi: Use secure MPI in _gcry_mpi_assign_limb_space.
Jan 30 2026, 10:41 AM
gniibe committed rCc6e0658004b5: fips,cipher: Fix the regression with disabled public-key algo. (authored by gniibe).
fips,cipher: Fix the regression with disabled public-key algo.
Jan 30 2026, 10:41 AM
gniibe claimed T8065: gnupg self test hang: clean migration.
Jan 30 2026, 9:02 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe added a comment to T8065: gnupg self test hang: clean migration.

Thank you for your report.

Jan 30 2026, 9:00 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe added a comment to T8066: gpgrt: Static linking support.

TL;DR
This ticket was created because building static-linked gpgv shows warnings from glibc for getpwnam and getpwuid.
Basically, we can/should ignore the warnings from glibc at link time (for normal use cases), because it is irrelevant.

Jan 30 2026, 2:19 AM · Linux, Feature Request, gpgrt

Jan 29 2026

gniibe created T8066: gpgrt: Static linking support.
Jan 29 2026, 5:21 AM · Linux, Feature Request, gpgrt

Jan 28 2026

gniibe committed rMe4623a83adf4: Fix build with libassuan 2. (authored by collinfunk).
Fix build with libassuan 2.
Jan 28 2026, 7:04 AM

Jan 23 2026

gniibe added a comment to T8049: Null pointer dereference with overlong signature packet.

I see your point. I am afraid adding skipme causes a larger changes.

Jan 23 2026, 7:24 AM · segv, gnupg26, Bug Report

Jan 22 2026

gniibe added a comment to T8049: Null pointer dereference with overlong signature packet.

Here are changes to fix the behavior:


Jan 22 2026, 7:48 AM · segv, gnupg26, Bug Report
gniibe changed the status of T7338: Revamp the FIPS service indicator from Open to Testing.

Fixed in: rC2c1d41b5f86f: fips,cipher: Fix the regression with disabled public-key algo.

Jan 22 2026, 5:48 AM · libgcrypt, FIPS, Feature Request
gniibe reopened T7338: Revamp the FIPS service indicator as "Open".

Re-opened because a regression is reported.

Jan 22 2026, 5:47 AM · libgcrypt, FIPS, Feature Request
gniibe committed rC2c1d41b5f86f: fips,cipher: Fix the regression with disabled public-key algo. (authored by gniibe).
fips,cipher: Fix the regression with disabled public-key algo.
Jan 22 2026, 5:30 AM
gniibe renamed T8045: Stack-based buffer overflow in TPM2 `PKDECRYPT` from Security (internal) - Stack-based buffer overflow in TPM2 `PKDECRYPT` to Stack-based buffer overflow in TPM2 `PKDECRYPT`.
Jan 22 2026, 12:33 AM · gnupg26, CVE, TPM, Bug Report

Jan 21 2026

gniibe created T8049: Null pointer dereference with overlong signature packet.
Jan 21 2026, 7:57 AM · segv, gnupg26, Bug Report

Jan 20 2026

gniibe added a comment to T8044: gpg-agent stack buffer overflow in pkdecrypt using KEM.

On 2026-01-20, I found the message to security@gnupg.org of:
Message-ID: 4e708880-04ac-45bc-8d16-6b585f2652a1n@aisle.com
in may spam folder. It has a 10MB long attachment. That might be one of reasons to be identified as a spam.

Jan 20 2026, 6:42 AM · CVE, gnupg26, gpgagent, Bug Report
gniibe added a comment to T8045: Stack-based buffer overflow in TPM2 `PKDECRYPT`.

Considering the current implementation (tpm2d doesn't support keyinfo like scdaemon), it would be good to check the buffer size.
(If key information is accessible easily, we can check with a specific key.)

Jan 20 2026, 6:06 AM · gnupg26, CVE, TPM, Bug Report
gniibe created T8045: Stack-based buffer overflow in TPM2 `PKDECRYPT`.
Jan 20 2026, 1:54 AM · gnupg26, CVE, TPM, Bug Report
gniibe added projects to T8044: gpg-agent stack buffer overflow in pkdecrypt using KEM: gpgagent, gnupg.
Jan 20 2026, 1:52 AM · CVE, gnupg26, gpgagent, Bug Report
gniibe created T8044: gpg-agent stack buffer overflow in pkdecrypt using KEM.
Jan 20 2026, 1:52 AM · CVE, gnupg26, gpgagent, Bug Report

Jan 19 2026

gniibe changed the status of T7889: libgcrypt: HAVE_BROKEN_MLOCK from Open to Testing.

Backports have been done in both (1.10/1.11) branches.

Jan 19 2026, 6:58 AM · backport, libgcrypt, Bug Report
gniibe changed the status of T7127: GPGME deprecate/remove the helper gpgme-w32spawn program, a subtask of T7125: GPGME spawn for Windows 64-bit, from Open to Testing.
Jan 19 2026, 6:48 AM · Windows 64, gpgme
gniibe changed the status of T7127: GPGME deprecate/remove the helper gpgme-w32spawn program from Open to Testing.
Jan 19 2026, 6:48 AM · Windows 64, gpgme
gniibe closed T7187: gpgme: Debug output for size_t and off_t, a subtask of T6634: Port GPGME to Windows 64-bit, as Resolved.
Jan 19 2026, 6:47 AM · Windows 64, gpgme
gniibe closed T7187: gpgme: Debug output for size_t and off_t as Resolved.
Jan 19 2026, 6:47 AM · Windows 64, gpgme

Jan 15 2026

gniibe committed rP9e17a6fbccc9: build: Update m4 files. (authored by gniibe).
build: Update m4 files.
Jan 15 2026, 12:41 PM
gniibe committed rPTHd4e067d96c5e: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 15 2026, 12:14 PM
gniibe committed rT7edee62fc51f: build: Update ksba.m4 from libksba. (authored by gniibe).
build: Update ksba.m4 from libksba.
Jan 15 2026, 11:05 AM
gniibe committed rTaef8d7e3cb89: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 15 2026, 11:05 AM
gniibe committed rK63df5658b41d: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 15 2026, 9:14 AM
gniibe committed rS352b2962786f: build: Update build-aux and m4 from libgpg-error and libassuan. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error and libassuan.
Jan 15 2026, 8:46 AM
gniibe committed rM9e4e122097b4: build: Update build-aux and m4 from libgpg-error and libassuan. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error and libassuan.
Jan 15 2026, 6:48 AM
gniibe committed rAdcb600956c78: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 15 2026, 6:09 AM
gniibe committed rE9a68e459efdf: build: Fix typos in texinfo.tex. (authored by gniibe).
build: Fix typos in texinfo.tex.
Jan 15 2026, 6:07 AM
gniibe committed rC85bbb3373436: build: Apply local change to texinfo.tex. (authored by gniibe).
build: Apply local change to texinfo.tex.
Jan 15 2026, 6:06 AM

Jan 14 2026

gniibe committed rAc08091e84da7: Fix for header files for sys/time.h and sys/select.h. (authored by gniibe).
Fix for header files for sys/time.h and sys/select.h.
Jan 14 2026, 8:57 AM
gniibe committed rA46c3110d29ac: build: Update build-aux and m4 from libgpg-error. (authored by gniibe).
build: Update build-aux and m4 from libgpg-error.
Jan 14 2026, 8:57 AM