Page MenuHome GnuPG
Feed All Stories

Feb 19 2025

werner added a comment to T7527: Keyring/keybox denial of service.

Sorry. I can't reproduce this. Neither with master nor with the 2.4 repo version.

Feb 19 2025, 11:27 AM · OpenPGP, gnupg, Bug Report
TobiasFella added a comment to T7535: Kleopatra: "Decrypt/Verify all files in folder" doesn't work.

We don't have this exact action on windows, but the normal "Decrypt & Verify" action shows up for folders there (and doesn't work either).

Feb 19 2025, 11:26 AM · Feature Request, kleopatra
uwi updated the task description for T7536: Key import dialog should come into foreground when import was triggered by file association.
Feb 19 2025, 9:22 AM · UI, Bug Report, gpg4win
uwi updated the task description for T7536: Key import dialog should come into foreground when import was triggered by file association.
Feb 19 2025, 9:20 AM · UI, Bug Report, gpg4win
uwi created T7536: Key import dialog should come into foreground when import was triggered by file association.
Feb 19 2025, 9:19 AM · UI, Bug Report, gpg4win
gniibe changed the status of T7519: libgcrypt: (EC)DSA signature generation should be constant-time from Open to Testing.

All changes are pushed to master.

Feb 19 2025, 5:36 AM · libgcrypt, Bug Report
gniibe changed the status of T7490: libgcrypt: constant-time modular exponentiation, a subtask of T3264: Possible RSA improvement, from Open to Testing.
Feb 19 2025, 5:35 AM · libgcrypt
gniibe changed the status of T7490: libgcrypt: constant-time modular exponentiation from Open to Testing.

Pushed the changes by the commit rC2039d93289db: mpi: Add MPI helper modular exponentiation, Least Leak Intended.

Feb 19 2025, 5:35 AM · libgcrypt
gniibe committed rC58aca75a295d: mpi: Add a comment on _gcry_mpih_lookup_lli. (authored by gniibe).
mpi: Add a comment on _gcry_mpih_lookup_lli.
Feb 19 2025, 3:02 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA6676ebc81446: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 19 2025, 2:39 AM
gniibe committed rCbd53c51b0338: mpi: Fix _gcry_mpih_add_lli, as macro. (authored by gniibe).
mpi: Fix _gcry_mpih_add_lli, as macro.
Feb 19 2025, 2:35 AM
gniibe committed rC8fd2aab881c7: mpi: Add MPH helper of table lookup, Least Leak Intended. (authored by gniibe).
mpi: Add MPH helper of table lookup, Least Leak Intended.
Feb 19 2025, 1:03 AM
gniibe committed rC2039d93289db: mpi: Add MPI helper modular exponentiation, Least Leak Intended. (authored by gniibe).
mpi: Add MPI helper modular exponentiation, Least Leak Intended.
Feb 19 2025, 1:03 AM

Feb 18 2025

CarlSchwan committed rOJb2a73f805bd8: Fix building on Windows (authored by CarlSchwan).
Fix building on Windows
Feb 18 2025, 11:40 PM
CarlSchwan committed rOJae20fc15268e: Remove dead code (authored by CarlSchwan).
Remove dead code
Feb 18 2025, 11:40 PM
dkg added a comment to T7527: Keyring/keybox denial of service.

the reproducer is:

Feb 18 2025, 10:42 PM · OpenPGP, gnupg, Bug Report
dkg reopened T7527: Keyring/keybox denial of service as "Open".

I don't think this is fixed. With this patch in place, if i import blocker.cert first, and then import distsigkey.gpg, it looks to me like i still can't verify signatures made from any of the GnuPG signing keys.

Feb 18 2025, 10:40 PM · OpenPGP, gnupg, Bug Report
ikloecker created T7535: Kleopatra: "Decrypt/Verify all files in folder" doesn't work.
Feb 18 2025, 7:18 PM · Feature Request, kleopatra
werner triaged T7462: gpg4win CLI installation ignores .ini configuration as Normal priority.
Feb 18 2025, 4:51 PM · gpd5x, gpg4win
werner triaged T7534: GpgOL: Header info disappears when forwarding a HTML mail as Normal priority.
Feb 18 2025, 4:50 PM · gpgol
ebo updated the task description for T7534: GpgOL: Header info disappears when forwarding a HTML mail.
Feb 18 2025, 4:34 PM · gpgol
ebo created T7534: GpgOL: Header info disappears when forwarding a HTML mail.
Feb 18 2025, 4:33 PM · gpgol
ebo moved T6559: GPGSM: "always trust like override" or "force" option from Backlog to Done on the gpgol board.
Feb 18 2025, 2:46 PM · gnupg24 (gnupg-2.4.4), gpgme (gpgme 1.23.x), gnupg22 (gnupg-2.2.42), Feature Request, gpgol, S/MIME, kleopatra, Restricted Project
werner committed rA9139b983278e: Post release updates (authored by werner).
Post release updates
Feb 18 2025, 2:14 PM
werner committed rA0f84595a4bc7: Release 3.0.2 (authored by werner).
Release 3.0.2
Feb 18 2025, 2:14 PM
werner committed rA27b58fd6674c: Put full commit id into VERSION. (authored by werner).
Put full commit id into VERSION.
Feb 18 2025, 2:14 PM
werner committed rDfca69ef13b11: swdb: libassuan 3.0.2 (authored by werner).
swdb: libassuan 3.0.2
Feb 18 2025, 2:03 PM
werner added a comment to T7434: Kleopatra: Initial keylisting hangs for ~60 seconds (gpg-agent: Socket ...S.gpg-agent cannot be bound).

Can now be tested after the release of libassuan 3.0.2 (T6163)

Feb 18 2025, 1:53 PM · gnupg, kleopatra
werner closed T7456: libassuan: Windows: assuan_sock_bind error as Resolved.

Released with libassuan 3.0.2 (T7163)

Feb 18 2025, 1:52 PM · libassuan, Windows
werner updated the task description for T7163: Release libassuan 3.0.0 and 3.0.1.
Feb 18 2025, 1:45 PM · libassuan, Release Info
ikloecker committed rW4ffa6769d75c: Remove obsolete configure option of kxmlgui (authored by ikloecker).
Remove obsolete configure option of kxmlgui
Feb 18 2025, 1:16 PM
ikloecker committed rWe71f58399014: Remove references to removed DISTRIBUTION_TEXT variable (authored by ikloecker).
Remove references to removed DISTRIBUTION_TEXT variable
Feb 18 2025, 1:16 PM
werner committed rGfeeceed97061: agent: Improve diagnostics for a bind call failure. (authored by werner).
agent: Improve diagnostics for a bind call failure.
Feb 18 2025, 12:17 PM
werner committed rG3239a41ddea0: doc: Add some notes (authored by werner).
doc: Add some notes
Feb 18 2025, 9:25 AM
ikloecker claimed T7040: Make it possible to install GnuPG VSD and GPD in parallel.
Feb 18 2025, 8:49 AM · gpd5x, kleopatra
l10n daemon script <scripty@kde.org> committed rKLEOPATRA3eb3874c65d5: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 18 2025, 4:14 AM
gniibe committed rCbb5e893456b1: cipher:(EC)DSA: Fix _gcry_dsa_gen_*k not to normalize MPI. (authored by gniibe).
cipher:(EC)DSA: Fix _gcry_dsa_gen_*k not to normalize MPI.
Feb 18 2025, 3:18 AM
gniibe committed rC0b794c208db3: cipher:(EC)DSA: Avoid MPI normalize by mpi_rshift. (authored by gniibe).
cipher:(EC)DSA: Avoid MPI normalize by mpi_rshift.
Feb 18 2025, 3:18 AM
gniibe committed rCd05cdb31689a: cipher:(EC)DSA: Fix _gcry_dsa_modify_k to least leak. (authored by gniibe).
cipher:(EC)DSA: Fix _gcry_dsa_modify_k to least leak.
Feb 18 2025, 3:18 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRAad711ac066ec: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 18 2025, 2:38 AM

Feb 17 2025

aheinecke added a comment to T169: Add a way to generate keypairs from a passphrase.

As I am delving a bit into cryptocurrencies and since i have a ledger security token and a bip32 24 word mnemonic now backed up as stamped metal i have stumbled accross this topic:

Feb 17 2025, 11:07 PM · gnupg, Feature Request
werner committed rW6f8a2da1a04b: build: Create a file with changed sources. (authored by werner).
build: Create a file with changed sources.
Feb 17 2025, 6:19 PM
werner committed rWc00991043659: msi: More tweaks and some corrections due to new PO system. (authored by werner).
msi: More tweaks and some corrections due to new PO system.
Feb 17 2025, 6:10 PM
werner committed rW89e9ee26e525: build: Fix diagnostic outputs. (authored by werner).
build: Fix diagnostic outputs.
Feb 17 2025, 6:10 PM
werner committed rW4de33834af87: nsis: Tweak includedir paths. (authored by werner).
nsis: Tweak includedir paths.
Feb 17 2025, 6:10 PM
TobiasFella committed rGPGPASS70456754ac78: Update copyright year (authored by TobiasFella).
Update copyright year
Feb 17 2025, 3:54 PM
hej added a comment to T7502: Kleopatra: Import secret key dialog improvement.

"Exclusive user" sounds a bit odd and could still be misinterpreted. A native speaker would probably say "Are you the sole user of this secret key?“ or (even better and shorter) "Are you the only user of this secret key?"

Feb 17 2025, 10:56 AM · vsd34, gpd5x, kleopatra
gniibe committed rC58e72af4eac4: mpi: Add _gcry_mpih_add_lli. (authored by gniibe).
mpi: Add _gcry_mpih_add_lli.
Feb 17 2025, 6:35 AM
gniibe committed rC459a6c9c81ee: mpi: Add _gcry_mpih_cmp_lli, Least Leak Intended. (authored by gniibe).
mpi: Add _gcry_mpih_cmp_lli, Least Leak Intended.
Feb 17 2025, 6:35 AM
gniibe committed rC06de5bc27753: mpi: Add _gcry_mpih_add_1_lli as Least Leak Intended. (authored by gniibe).
mpi: Add _gcry_mpih_add_1_lli as Least Leak Intended.
Feb 17 2025, 6:35 AM
gniibe committed rC13a71215c255: md: Make SHA1 non-FIPS and differentiate in the SLI (authored by Lucas Mulling <lucas.mulling@suse.com>).
md: Make SHA1 non-FIPS and differentiate in the SLI
Feb 17 2025, 5:23 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA6882df1e4259: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 17 2025, 2:36 AM

Feb 16 2025

ballapete triaged T7533: gpgme-1.24.1 and gpgme-1.24.2 do not compile on Mac OS X 10.4.11, Tiger, because of problem with strcasecmp/strncasecmp in gpgme-tool.c as Normal priority.
Feb 16 2025, 3:57 PM · gpgme
l10n daemon script <scripty@kde.org> committed rMTP2ae386dca300: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 16 2025, 4:21 AM
l10n daemon script <scripty@kde.org> committed rLIBKLEO3290c5109889: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 16 2025, 4:20 AM
l10n daemon script <scripty@kde.org> committed rLIBKLEO745ae0761fa8: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 16 2025, 2:40 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA6e2313ad45ec: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 16 2025, 2:40 AM

Feb 15 2025

mlaurent committed rKLEOPATRA0785ea39d8c5: Add windows CI support (authored by mlaurent).
Add windows CI support
Feb 15 2025, 5:55 PM
l10n daemon script <scripty@kde.org> committed rMTP74d3b93e1257: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 15 2025, 4:46 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA03a6004caa3a: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 15 2025, 4:45 AM
l10n daemon script <scripty@kde.org> committed rMTPb691c02408fc: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 15 2025, 2:52 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA4d398b86416c: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 15 2025, 2:51 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRAfc58cfae5d59: SVN_SILENT made messages (.desktop file) - always resolve ours (authored by l10n daemon script <scripty@kde.org>).
SVN_SILENT made messages (.desktop file) - always resolve ours
Feb 15 2025, 2:35 AM
l10n daemon script <scripty@kde.org> committed rLIBKLEO857048df202b: SVN_SILENT made messages (.desktop file) - always resolve ours (authored by l10n daemon script <scripty@kde.org>).
SVN_SILENT made messages (.desktop file) - always resolve ours
Feb 15 2025, 2:32 AM

Feb 14 2025

werner committed rW875e2b1d51de: po: Take care of POT creation date on *po when comparing. (authored by werner).
po: Take care of POT creation date on *po when comparing.
Feb 14 2025, 5:27 PM
werner committed rWd5a0b32d5f36: po: Include a POT file (authored by werner).
po: Include a POT file
Feb 14 2025, 5:27 PM
werner committed rWd65d583c7b8d: po: Yet another VPATH and docker patch (authored by werner).
po: Yet another VPATH and docker patch
Feb 14 2025, 5:27 PM
werner committed rWc1e634b18db6: Update build-aux scripts. (authored by werner).
Update build-aux scripts.
Feb 14 2025, 5:27 PM
werner committed rW2c5621ee5ea8: New option --dist for build.sh (authored by werner).
New option --dist for build.sh
Feb 14 2025, 5:27 PM
ebo added a comment to T7502: Kleopatra: Import secret key dialog improvement.

Background of my "reminder" comment: we were discussing to establish a sane workflow for sharing keys. Which is quite commonly done e.g. for functional mail addresses, but usually people seem to share the whole secret key which is not advisable. We would want people to only share subkeys for that purpose.
It was the case that somebody gets a subkey for such an "offline" primary for the first time which I was thinking of.

Feb 14 2025, 2:25 PM · vsd34, gpd5x, kleopatra
ikloecker added a comment to T7515: Kleopatra: reduce the number of actions in the context menu.

Details should be the first action (since it's likely the most often used action by people who don't know about double-click). And I'd move the "destructive actions" to the bottom. And there are way to many separators.

Feb 14 2025, 1:19 PM · gpd5x, kleopatra
ikloecker added a comment to T7502: Kleopatra: Import secret key dialog improvement.
In T7502#198141, @ebo wrote:

Reminder: we have to keep in mind the workflow of the import of secret subkeys. Do we need different behavior conditional on "is primary key present" or not?

Feb 14 2025, 1:14 PM · vsd34, gpd5x, kleopatra
werner committed rW74ada0da848c: po: Simplify the Makefile by dropping the gettext make framework. (authored by werner).
po: Simplify the Makefile by dropping the gettext make framework.
Feb 14 2025, 1:01 PM
ebo added a comment to T7502: Kleopatra: Import secret key dialog improvement.

Reminder: we have to keep in mind the workflow of the import of secret subkeys. Do we need different behavior conditional on "is primary key present" or not?

Feb 14 2025, 12:34 PM · vsd34, gpd5x, kleopatra
ebo renamed T6471: Draft: Kleopatra: Increase warning for backup secret key - Especially in de-vs mode from Kleopatra: Increase warning for backup secret key - Especially in de-vs mode to Draft: Kleopatra: Increase warning for backup secret key - Especially in de-vs mode.
Feb 14 2025, 12:06 PM · gpd5x, Windows, kleopatra
ebo moved T6485: Kleopatra: Don't use checkboxes to configure signing and encryption from Backlog to QA on the gpd5x board.
Feb 14 2025, 12:00 PM · gpd5x, kleopatra
ebo renamed T6485: Kleopatra: Don't use checkboxes to configure signing and encryption from Kleopatra: give warning if file will only be encrypted to self to Kleopatra: Don't use checkboxes to configure signing and encryption.
Feb 14 2025, 12:00 PM · gpd5x, kleopatra
TobiasFella added a comment to T7515: Kleopatra: reduce the number of actions in the context menu.

With my initial suggestions, modified by:

Feb 14 2025, 11:53 AM · gpd5x, kleopatra
l10n daemon script <scripty@kde.org> committed rMTP3dea7c318b2a: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Feb 14 2025, 4:27 AM
gniibe added a comment to T7519: libgcrypt: (EC)DSA signature generation should be constant-time.

Use of mpi_cmp is now being fixed, by providing _gcry_mpih_cmp_lli function.
Along with that, we need to fix use of mpi_cmp_ui, since it's skips earlier depending its limbs.

diff --git a/cipher/dsa-common.c b/cipher/dsa-common.c
index 170dce12..e010e182 100644
--- a/cipher/dsa-common.c
+++ b/cipher/dsa-common.c
@@ -25,6 +25,7 @@
Feb 14 2025, 1:32 AM · libgcrypt, Bug Report

Feb 13 2025

dkg added a comment to T7106: Trailing newline trouble in clearsigned message generation and verification.

Just a note that i've tested this and --clearsign appears to be problematic for 2.4.7 as well as 2.2.40.

Feb 13 2025, 11:41 PM · Not A Bug, gnupg
jukivili committed rC957ac97097d0: mpih-const-time: fix return value for _gcry_mpih_cmp_ui (authored by jukivili).
mpih-const-time: fix return value for _gcry_mpih_cmp_ui
Feb 13 2025, 8:26 PM
CarlSchwan committed rOJ22651e93cb63: Generate root ca and install it on linux truststore (authored by CarlSchwan).
Generate root ca and install it on linux truststore
Feb 13 2025, 5:29 PM
CarlSchwan committed rOJ213837206018: More work (authored by CarlSchwan).
More work
Feb 13 2025, 5:29 PM
CarlSchwan committed rOJa3f2472eb5bd: Create certificate (authored by CarlSchwan).
Create certificate
Feb 13 2025, 5:29 PM
CarlSchwan committed rOJ6dfb25478338: Make EWS factory more generic (authored by CarlSchwan).
Make EWS factory more generic
Feb 13 2025, 5:29 PM
CarlSchwan committed rOJ2cd22602cf66: Add back spellchecking (authored by CarlSchwan).
Add back spellchecking
Feb 13 2025, 5:29 PM
CarlSchwan committed rOJ5b37c1ce17ee: Remove dependency of KPimTextEdit and KtextAddons (authored by CarlSchwan).
Remove dependency of KPimTextEdit and KtextAddons
Feb 13 2025, 5:29 PM
CarlSchwan committed rOJ968ecf022eae: bodytexteditor: Use early return (authored by CarlSchwan).
bodytexteditor: Use early return
Feb 13 2025, 5:29 PM
CarlSchwan committed rOJ0f185cf0952e: mailtemplates: Fix some clazy issues (authored by CarlSchwan).
mailtemplates: Fix some clazy issues
Feb 13 2025, 5:29 PM
TobiasFella triaged T7532: Kleopatra fails to decrypt/extract archives located at very long file paths as Normal priority.
Feb 13 2025, 4:24 PM · vsd33 (vsd-3.3.1), gpd5x, Bug Report, kleopatra
ikloecker committed rW3cf5bdcbbe6b: Add new icons to tarball (authored by ikloecker).
Add new icons to tarball
Feb 13 2025, 3:03 PM
ikloecker claimed T7528: Make it possible to run Kleopatra VSD and Kleopatra GPD in parallel.
Feb 13 2025, 2:51 PM · vsd34, test on hold, gpd5x, kleopatra
TobiasFella committed rKLEOPATRA8af158417871: Remove leftovers of invoking manual decryption dialog (authored by TobiasFella).
Remove leftovers of invoking manual decryption dialog
Feb 13 2025, 1:57 PM
TobiasFella committed rKLEOPATRAed662f87d799: Remove DecryptVerifyFilesController (authored by TobiasFella).
Remove DecryptVerifyFilesController
Feb 13 2025, 1:57 PM
TobiasFella committed rKLEOPATRA6d36901df0bf: Remove DecryptVerifyFilesWizard and DecryptVerifyOperationWidget (authored by TobiasFella).
Remove DecryptVerifyFilesWizard and DecryptVerifyOperationWidget
Feb 13 2025, 1:57 PM
TobiasFella committed rKLEOPATRA436432e47b11: Rename AutoDecryptVerifyFilesController to DecryptVerifyFilesController (authored by TobiasFella).
Rename AutoDecryptVerifyFilesController to DecryptVerifyFilesController
Feb 13 2025, 1:57 PM
TobiasFella committed rKLEOPATRA69f6499531f5: Remove option/fallback to manually selecting the operations to be performed on… (authored by TobiasFella).
Remove option/fallback to manually selecting the operations to be performed on…
Feb 13 2025, 1:57 PM
ebo added a comment to T7515: Kleopatra: reduce the number of actions in the context menu.

Another thing (should definitely go into a new ticket if we want to do something regarding this):

Feb 13 2025, 11:58 AM · gpd5x, kleopatra
ebo edited projects for T7088: Do not allow local installation (without administrator rights) for VSD, added: gpd5x; removed Restricted Project.
Feb 13 2025, 10:34 AM · gpd5x, vsd