Page MenuHome GnuPG
Feed Advanced Search

Nov 9 2017

gniibe committed rGccf3ba92087e: g10: Fix regexp sanitization. (authored by gniibe).
g10: Fix regexp sanitization.
Nov 9 2017, 7:39 AM
gniibe added a comment to T2923: trust signature domain restrictions don't work.

Henry Spencer wrote three implementations (old, BSD, and Tcl): https://garyhouston.github.io/regex/
Indeed, for the one in old library and BSD library, \ + CHAR means that single CHAR.
For one in Tcl library, \s, \S, \w, \W is supported (just like GNU), and \d, \D (digit) is also supported.

Nov 9 2017, 5:40 AM · gnupg (gpg14), Bug Report
gniibe added a comment to T3223: gcry_mpi_ec_mul with Montgomery curves produces segfault.

ECDH on Curve25519 is fully supported in libgcrypt. You can see GnuPG supports ECDH on Curve25519.
Lower layer routines (point addition and point duplication) are not implemented, though.
That's because ECDH only requires point multiplication and it is better to implement point multiplication by Montgomery Ladder for Curve25519.

Nov 9 2017, 3:16 AM · libgcrypt, Bug Report
gniibe committed rCda127f7505ff: Fix secmem test for machine with larger page. (authored by gniibe).
Fix secmem test for machine with larger page.
Nov 9 2017, 3:04 AM
gniibe committed rC621f5c4e8373: Fix secmem test for machine with larger page. (authored by gniibe).
Fix secmem test for machine with larger page.
Nov 9 2017, 3:04 AM
gniibe changed the status of T3351: libgcrypt: t_secmem fails on system with large page size (ppc64) from Open to Testing.

Fixed both for master and 1.8 branch.

Nov 9 2017, 3:03 AM · libgcrypt, Bug Report
gniibe claimed T3351: libgcrypt: t_secmem fails on system with large page size (ppc64).
Nov 9 2017, 3:01 AM · libgcrypt, Bug Report
gniibe merged T3375: t-secmem test failure on ppc64le / musl c-library into T3351: libgcrypt: t_secmem fails on system with large page size (ppc64).
Nov 9 2017, 3:00 AM · libgcrypt, Bug Report
gniibe merged task T3375: t-secmem test failure on ppc64le / musl c-library into T3351: libgcrypt: t_secmem fails on system with large page size (ppc64).
Nov 9 2017, 3:00 AM · libgcrypt, Bug Report

Nov 8 2017

gniibe claimed T2923: trust signature domain restrictions don't work.
Nov 8 2017, 9:06 AM · gnupg (gpg14), Bug Report
gniibe added a comment to T2923: trust signature domain restrictions don't work.

It might be not a regression. The possibilities are: (1) it was tested by using non-GNU operating system. (2) Tests didn't cover characters (b, B, w, W, s, and S).

Nov 8 2017, 4:13 AM · gnupg (gpg14), Bug Report

Nov 7 2017

gniibe added a comment to T3472: gpgme-1.9.0 test suite hangs on OpenBSD.

Yes, it will be in 2.2.3. It's too late for 2.2.2.

Nov 7 2017, 10:38 AM · gpgagent, gnupg (gpg22), gpgme
gniibe added a task to D450: clock_gettime if CLOCK_THREAD_CPUTIME_ID is available.: T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel.
Nov 7 2017, 9:28 AM
gniibe added a revision to T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel: D450: clock_gettime if CLOCK_THREAD_CPUTIME_ID is available..
Nov 7 2017, 9:28 AM · Bug Report
gniibe changed the status of T3056: gpgme-1.8.0: test failures on NetBSD from Open to Testing.

I believe this is due to the bug of gpg-agent. So, I put this report as a sub task under T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel.

Nov 7 2017, 9:27 AM · gpgme (gpgme 1.23.x), gpgagent, gnupg (gpg23)
gniibe changed the status of T3056: gpgme-1.8.0: test failures on NetBSD, a subtask of T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel, from Open to Testing.
Nov 7 2017, 9:27 AM · Bug Report
gniibe added a parent task for T3056: gpgme-1.8.0: test failures on NetBSD: T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel.
Nov 7 2017, 9:25 AM · gpgme (gpgme 1.23.x), gpgagent, gnupg (gpg23)
gniibe added a subtask for T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel: T3056: gpgme-1.8.0: test failures on NetBSD.
Nov 7 2017, 9:25 AM · Bug Report
gniibe added a subtask for T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel: T3472: gpgme-1.9.0 test suite hangs on OpenBSD.
Nov 7 2017, 9:24 AM · Bug Report
gniibe added a parent task for T3472: gpgme-1.9.0 test suite hangs on OpenBSD: T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel.
Nov 7 2017, 9:24 AM · gpgagent, gnupg (gpg22), gpgme
gniibe triaged T3472: gpgme-1.9.0 test suite hangs on OpenBSD as Normal priority.
Nov 7 2017, 9:23 AM · gpgagent, gnupg (gpg22), gpgme
gniibe changed the status of T3472: gpgme-1.9.0 test suite hangs on OpenBSD from Open to Testing.

This is a bug in gpg-agent.

Nov 7 2017, 9:23 AM · gpgagent, gnupg (gpg22), gpgme
gniibe committed rC71a07704ad98: build: Don't use /dev/srandom on OpenBSD. (authored by Jeremie Courreges-Anglas <jca@wxcvbn.org>).
build: Don't use /dev/srandom on OpenBSD.
Nov 7 2017, 5:26 AM
gniibe created D452: Build: FreeBSD make.
Nov 7 2017, 5:19 AM · gnupg
gniibe added a comment to T3152: KDF DO support in OpenPGP card.

Implemented in a branch: gniibe/scd-kdf-support

Nov 7 2017, 3:30 AM · scd
gniibe committed rG526d144b1bb6: scd: Support KDF Data Object of OpenPGPcard V3.3. (authored by gniibe).
scd: Support KDF Data Object of OpenPGPcard V3.3.
Nov 7 2017, 3:26 AM
gniibe committed rG96d441b315ec: po: Update Japanese translation (authored by gniibe).
po: Update Japanese translation
Nov 7 2017, 3:16 AM
gniibe committed rG380bce13d94f: agent: Use clock or clock_gettime for calibration. (authored by gniibe).
agent: Use clock or clock_gettime for calibration.
Nov 7 2017, 3:03 AM
gniibe added a comment to T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel.

I confirmed that clock is better on FreeBSD, too. And FreeBSD has clock_gettime with CLOCK_THREAD_CPUTIME_ID.
I tested FreeBSD 11.1 running QEMU.

Nov 7 2017, 2:37 AM · Bug Report
gniibe added a comment to T3056: gpgme-1.8.0: test failures on NetBSD.

Could you please testing gpgme with D450: clock_gettime if CLOCK_THREAD_CPUTIME_ID is available. for GnuPG?

Nov 7 2017, 1:39 AM · gpgme (gpgme 1.23.x), gpgagent, gnupg (gpg23)
gniibe added a comment to T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel.

# My update of D450: clock_gettime if CLOCK_THREAD_CPUTIME_ID is available. has gone somewhere. So, I update it again.

Nov 7 2017, 1:36 AM · Bug Report
gniibe updated the diff for D450: clock_gettime if CLOCK_THREAD_CPUTIME_ID is available..

Use clock instead of times.

Nov 7 2017, 1:27 AM

Nov 6 2017

gniibe added a comment to T3472: gpgme-1.9.0 test suite hangs on OpenBSD.

Could you please try D450: clock_gettime if CLOCK_THREAD_CPUTIME_ID is available. patch of GnuPG?

Nov 6 2017, 8:56 AM · gpgagent, gnupg (gpg22), gpgme
gniibe committed rC77e314a42a9c: build: Don't use /dev/srandom on OpenBSD. (authored by Jeremie Courreges-Anglas <jca@wxcvbn.org>).
build: Don't use /dev/srandom on OpenBSD.
Nov 6 2017, 7:10 AM
gniibe closed T3483: Fix Makefile that does not compile on Debian Stable as Invalid.

That's your building problem, not the problem of gnupg.

Nov 6 2017, 6:46 AM · Bug Report

Nov 3 2017

gniibe added a comment to T3478: Subkey-Grip support for unattended key generation.

Yes, I put the tag of gpg2.2, as it's useful to compose key from external source.

Nov 3 2017, 8:13 AM · gnupg (gpg22)

Nov 2 2017

gniibe added a comment to T3152: KDF DO support in OpenPGP card.

Changes for Gnuk is done. It's now testing. It will be in Gnuk 1.2.7.

Nov 2 2017, 8:49 AM · scd
gniibe committed rG5e96fe72e477: agent: Fix returning GPG_ERR_NOT_FOUND wrongly. (authored by gniibe).
agent: Fix returning GPG_ERR_NOT_FOUND wrongly.
Nov 2 2017, 8:47 AM
gniibe added a project to T3473: gnupg agent configurable backlog for sockets: gpgagent.
Nov 2 2017, 5:28 AM · gpgagent, Feature Request
gniibe added a comment to T3469: gpg: decryption failed: No secret key <= after debian upgrade from Jessie to Stretch.

Did you run gpg before your copying $HOME data and after your installation of Stretch?
That gpg invocation create the file ~/.gnupg/.gpg-v21-migrated, which marks "the migration finished".

Nov 2 2017, 5:27 AM · Support, Documentation

Nov 1 2017

gniibe closed T1818: gnupg fails (buffer overflow detected) to encrypt archive when called from duplicity as Resolved.

OK, closed.

Nov 1 2017, 7:17 AM · Info Needed, gnupg, gnupg (gpg14), Bug Report, Debian
gniibe closed T3190: Recursive call of pinentry as Resolved.
Nov 1 2017, 7:07 AM · gnupg (gpg22)
gniibe added a comment to T3474: gpg: Note: '--list-options' is not considered an option.

GnuPG is picky about the order of options. Please put "--list-options show-photos" before -k.

Nov 1 2017, 3:24 AM · Bug Report
gniibe committed rG6c63a04569c0: g10: Unattended key generation "Key-Grip" and "Subkey-Grip". (authored by gniibe).
g10: Unattended key generation "Key-Grip" and "Subkey-Grip".
Nov 1 2017, 2:44 AM
gniibe renamed T3478: Subkey-Grip support for unattended key generation from Sub-keygrip support for unattended key generation to Subkey-Grip support for unattended key generation.
Nov 1 2017, 2:23 AM · gnupg (gpg22)
gniibe added a comment to T2349: Composing a private key from raw key material.

How about adding support with private in keyparam?

  • (genkey(rsa(nbit 2048)(d xxxx)(p xxxx)(q xxxx)(u xxxx))) ; Only p and q, is OK
  • (genkey(ecc(curve cv25519)(flags djb-tweak comp)(d xxx)))
Nov 1 2017, 12:52 AM · libgcrypt, Feature Request
gniibe added a project to T3478: Subkey-Grip support for unattended key generation: gnupg (gpg22).
Nov 1 2017, 12:40 AM · gnupg (gpg22)
gniibe added a subtask for T1734: [SUGGESTION] Implement a function to re-generate public keys and(!) "stubs" from private keys stored on smartcard only: T3478: Subkey-Grip support for unattended key generation.
Nov 1 2017, 12:37 AM · gnupg, Feature Request
gniibe added a parent task for T3478: Subkey-Grip support for unattended key generation: T1734: [SUGGESTION] Implement a function to re-generate public keys and(!) "stubs" from private keys stored on smartcard only.
Nov 1 2017, 12:37 AM · gnupg (gpg22)
gniibe created T3478: Subkey-Grip support for unattended key generation.
Nov 1 2017, 12:36 AM · gnupg (gpg22)

Oct 30 2017

gniibe added a comment to T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel.

clock returns CPU time on POSIX, wall clock time on Windows. For threads, I don't know.

Oct 30 2017, 12:52 PM · Bug Report
gniibe committed rGd63b7966cdd7: g10: Simplify "factory-reset" procedure. (authored by gniibe).
g10: Simplify "factory-reset" procedure.
Oct 30 2017, 6:23 AM
gniibe closed T3286: card: Yubikey factory-reset failure as Resolved.

D441 applied. Closed.

Oct 30 2017, 6:20 AM · gnupg (gpg22), scd
gniibe abandoned D441: card: Yubikey factory-reset failure.

Applied.

Oct 30 2017, 6:19 AM
gniibe added a comment to T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel.

Thanks for testing and proposing new patch.

Oct 30 2017, 3:17 AM · Bug Report

Oct 27 2017

gniibe committed rGfb7828676cc2: agent: Clean up pinentry access locking. (authored by gniibe).
agent: Clean up pinentry access locking.
Oct 27 2017, 3:22 AM
gniibe added a comment to rG3b66a256e376: agent: Allow recursive use of pinentry..

The code can be changed like:

  • ENTRY_LOCK for mutual exclusion for ENTRY_CTX and pinentry communication
  • Add ENTRY_OWNER_LOCK for mutual exclusion for accessing ENTRY_OWNER and ENTRY_LEVEL.
Oct 27 2017, 2:25 AM
gniibe added a comment to rG3b66a256e376: agent: Allow recursive use of pinentry..

I'm going to change the code a bit.

Oct 27 2017, 1:52 AM

Oct 26 2017

gniibe claimed T3276: the calibrate_get_time() function depends on a system that has a non-tickless kernel.

How about D450: clock_gettime if CLOCK_THREAD_CPUTIME_ID is available.?

Oct 26 2017, 9:08 AM · Bug Report
gniibe created D450: clock_gettime if CLOCK_THREAD_CPUTIME_ID is available..
Oct 26 2017, 9:07 AM
gniibe added projects to T3283: Set 'mym4_revision' to 0 if not a git repo: libgcrypt, libassuan, ntbtls, gpgme.

Here is the list:

  • libgcrypt
  • libassuan
  • ntbtls
  • gpgme : autogen.sh is ready
  • npth
Oct 26 2017, 8:28 AM · libgcrypt, Bug Report
gniibe added a comment to T3190: Recursive call of pinentry.

rG3b66a256e376: agent: Allow recursive use of pinentry. fixes the test case above.
I wish it doesn't cause any other issues.

Oct 26 2017, 7:45 AM · gnupg (gpg22)
gniibe committed rG3b66a256e376: agent: Allow recursive use of pinentry. (authored by gniibe).
agent: Allow recursive use of pinentry.
Oct 26 2017, 7:44 AM
gniibe added a comment to T3190: Recursive call of pinentry.

OK, I can make reproducible error case:

Oct 26 2017, 7:40 AM · gnupg (gpg22)
gniibe claimed T3190: Recursive call of pinentry.
Oct 26 2017, 7:10 AM · gnupg (gpg22)
gniibe closed T2167: Unplugging USB Smartcard/Yubikey causes problems with scdaemon as Resolved.
Oct 26 2017, 5:50 AM · gnupg (gpg22), Restricted Project, patch, Windows 64, scd, Windows, Windows 32, Bug Report
gniibe closed T3384: general ipc error building libassuan on cygwin as Resolved.
Oct 26 2017, 4:45 AM · Windows, libassuan, Bug Report
gniibe closed T3316: test failures in gnupg 2.1.22 when using configure --disable-scdaemon as Resolved.

Applied to 2.2 branch.

Oct 26 2017, 4:42 AM · Tests, Bug Report
gniibe committed rG05cb87276c21: agent, tests: Support --disable-scdaemon build case. (authored by gniibe).
agent, tests: Support --disable-scdaemon build case.
Oct 26 2017, 4:41 AM
gniibe committed rGb13972dfbf72: Fix comment of configure. (authored by gniibe).
Fix comment of configure.
Oct 26 2017, 4:41 AM
gniibe committed rGbf26c08b9538: agent, tests: Support --disable-scdaemon build case. (authored by gniibe).
agent, tests: Support --disable-scdaemon build case.
Oct 26 2017, 4:29 AM
gniibe committed rG3549dce4f5a7: Fix comment of configure. (authored by gniibe).
Fix comment of configure.
Oct 26 2017, 4:29 AM
gniibe claimed T3316: test failures in gnupg 2.1.22 when using configure --disable-scdaemon.

I fixed for master.
It will be into 2.2.

Oct 26 2017, 4:29 AM · Tests, Bug Report

Oct 25 2017

gniibe closed T3454: Hash SM3 support as Resolved.

Thanks for the information.
Closing, as I pushed rC94b84360ca55: Add OID information for SM3..

Oct 25 2017, 5:26 AM · libgcrypt, Feature Request
gniibe committed rC94b84360ca55: Add OID information for SM3. (authored by gniibe).
Add OID information for SM3.
Oct 25 2017, 5:07 AM
gniibe added a comment to T3454: Hash SM3 support.

OK, I found: http://www.oidchina.cn/oid/release/1.2.156.10197.
站点: 国家OID注册中心
数字OID: 10197
中文OID:
英文OID: sca10197
应用范围: 密码标准化技术委员会

Oct 25 2017, 4:00 AM · libgcrypt, Feature Request
gniibe added a comment to T3454: Hash SM3 support.

I use: 1.2.156.10197.1.401

Oct 25 2017, 3:49 AM · libgcrypt, Feature Request

Oct 24 2017

gniibe triaged T3454: Hash SM3 support as Normal priority.

I am now examining OID allocation.
I'll add the OID of SM3 into sm3.c.

Oct 24 2017, 9:29 AM · libgcrypt, Feature Request
gniibe committed rC4423bf3cc443: Add crypto hash SM3. (authored by jiazhang).
Add crypto hash SM3.
Oct 24 2017, 9:27 AM
gniibe committed rC5b31e22d9fc5: Add new constant GCRY_MD_SM3 for crypto hash SM3. (authored by gniibe).
Add new constant GCRY_MD_SM3 for crypto hash SM3.
Oct 24 2017, 9:27 AM
gniibe accepted D449: [PATCH] sm3: implement SM3 hash algorithm.

For this proposed change, it is merged.
I'll add OID thing.

Oct 24 2017, 9:11 AM
gniibe added a comment to D449: [PATCH] sm3: implement SM3 hash algorithm.

I'm going to add your change except src/gcrypt.h.in.

Oct 24 2017, 8:43 AM
gniibe added a comment to D449: [PATCH] sm3: implement SM3 hash algorithm.

IIUC, it's defined by the agency in 2010, and then it was published as the national standard: GM/T 0004-2012 SM3密码杂凑算法

Oct 24 2017, 6:59 AM
gniibe added a comment to D449: [PATCH] sm3: implement SM3 hash algorithm.

Thanks for your quick response.

Oct 24 2017, 6:24 AM
gniibe added a comment to D449: [PATCH] sm3: implement SM3 hash algorithm.

For the implementation, it looks good for me.
I have suggestions and some requests.

Oct 24 2017, 3:37 AM
gniibe added a comment to T2167: Unplugging USB Smartcard/Yubikey causes problems with scdaemon.

I am closing this bug report, as I can't get feedback to fix something.

Oct 24 2017, 2:42 AM · gnupg (gpg22), Restricted Project, patch, Windows 64, scd, Windows, Windows 32, Bug Report
gniibe closed T2738: gpg crashes when attempting to write a key to a card as Wontfix.

GnuPG 1.4 is only for old features. New features are only supported by GnuPG 2.2.

Oct 24 2017, 2:21 AM · Fedora, Bug Report, gnupg (gpg14)

Oct 19 2017

gniibe committed rG995c46ea77cf: g10: Fix find_and_check_key for multiple keyrings. (authored by gniibe).
g10: Fix find_and_check_key for multiple keyrings.
Oct 19 2017, 9:00 AM
gniibe committed rC72d0ca10c884: Register DCO for Jia Zhang. (authored by gniibe).
Register DCO for Jia Zhang.
Oct 19 2017, 9:00 AM

Oct 17 2017

gniibe added a comment to T3454: Hash SM3 support.

This is my note.
If it is intended to be used to OpenPGP, GCRY_MD_SM3 should be assigned in OpenPGP standard.

Oct 17 2017, 4:50 AM · libgcrypt, Feature Request
gniibe added a comment to T3454: Hash SM3 support.

Thank you. The diff doesn't include sm3.c. Could you please update?

Oct 17 2017, 4:49 AM · libgcrypt, Feature Request
gniibe claimed T3454: Hash SM3 support.
Oct 17 2017, 2:39 AM · libgcrypt, Feature Request
gniibe set External Link to https://tools.ietf.org/html/draft-shen-sm3-hash-01 on T3454: Hash SM3 support.
Oct 17 2017, 2:35 AM · libgcrypt, Feature Request
gniibe created T3454: Hash SM3 support.
Oct 17 2017, 2:33 AM · libgcrypt, Feature Request

Oct 12 2017

gniibe added a comment to T3439: error "This key is not certified with a trusted signature!" despite fully trusted key.

OK, I managed to replicate the failure of apt. Please note that it's not the failure of gpg.
So, your bug report is marked "Invalid", as a bug of gpg. Please understand that.

Oct 12 2017, 2:24 AM · Bug Report

Oct 11 2017

gniibe closed T3439: error "This key is not certified with a trusted signature!" despite fully trusted key as Invalid.

It seems that you have confusion between gpgv and gpg, and using "trust".

Oct 11 2017, 8:21 AM · Bug Report
gniibe added a comment to T3206: npth-1.3 failed to build on NetBSD-7.

From my viewpoint, it works well. Just you don't have a permission to install the library to the directory.

Oct 11 2017, 6:56 AM · npth, Bug Report

Sep 28 2017

gniibe added a comment to T3429: defer use of new signing subkeys.

For workaround (master branch with rG0a7661129499), moving the private key file to *.key.bak can do that.

Sep 28 2017, 12:48 AM · gnupg24, gnupg (gpg23), Feature Request

Sep 27 2017

gniibe closed T3426: quickbooks accountant support Number 1(800) 823 3634 quickbooks accountant support phone number as Invalid.
Sep 27 2017, 4:05 AM

Sep 26 2017

gniibe abandoned D296: 793_sign-fix.patch.
Sep 26 2017, 5:08 AM