Page MenuHome GnuPG
Feed Advanced Search

Tue, Feb 17

gniibe claimed T7875: GnuPG: Deletion of kyber key fails.
Tue, Feb 17, 8:48 AM · Bug Report, PQC, gnupg26

Mon, Feb 16

gniibe committed rC4aa07eeca100: cipher:ecc: Fix Weierstrass curve with PUBKEY_FLAG_PARAM. (authored by gniibe).
cipher:ecc: Fix Weierstrass curve with PUBKEY_FLAG_PARAM.
Mon, Feb 16, 2:39 AM
gniibe committed rC740915ea5f20: mpi:ec: Use mpi_new with NBITS, instead of mpi_alloc. (authored by gniibe).
mpi:ec: Use mpi_new with NBITS, instead of mpi_alloc.
Mon, Feb 16, 2:39 AM
gniibe committed rC1468aaaa473d: mpi:ec: Make sure to have MPI limbs in ECC. (authored by gniibe).
mpi:ec: Make sure to have MPI limbs in ECC.
Mon, Feb 16, 2:39 AM

Fri, Feb 13

gniibe raised the priority of T8094: libgcrypt: EC least leak failure from Low to High.
Fri, Feb 13, 9:32 AM · Info Needed, libgcrypt, Bug Report
gniibe added a comment to T8094: libgcrypt: EC least leak failure.

@thesamesam Thanks a lot.
I managed to replicate the failure somehow (for me, it fails at the importing the key).

Fri, Feb 13, 9:31 AM · Info Needed, libgcrypt, Bug Report
gniibe added a project to T8094: libgcrypt: EC least leak failure: Info Needed.

Please tell us the information of your environment.
What the versions of gpg and gpg-agent?

Fri, Feb 13, 8:13 AM · Info Needed, libgcrypt, Bug Report
gniibe renamed T8094: libgcrypt: EC least leak failure from libgcrypt: EC least leak failure on 32-bit machine to libgcrypt: EC least leak failure.
Fri, Feb 13, 8:10 AM · Info Needed, libgcrypt, Bug Report
gniibe added a comment to T7875: GnuPG: Deletion of kyber key fails.

Here is an attempt of mine this week:

diff --git a/g10/call-agent.c b/g10/call-agent.c
index 5e13a3e52..8949fad17 100644
--- a/g10/call-agent.c
+++ b/g10/call-agent.c
@@ -3290,13 +3290,14 @@ confirm_status_cb (void *opaque, const char *line)
    message.  If FORCE is true the agent is advised not to ask for
    confirmation. */
 gpg_error_t
-agent_delete_key (ctrl_t ctrl, const char *hexkeygrip, const char *desc,
+agent_delete_key (ctrl_t ctrl, const char *keygrip, const char *desc,
                   int force)
 {
   gpg_error_t err;
   char line[ASSUAN_LINELENGTH];
   struct default_inq_parm_s dfltparm;
   struct confirm_parm_s confirm_parm;
+  const char *keygrip2 = NULL;
Fri, Feb 13, 8:07 AM · Bug Report, PQC, gnupg26

Thu, Feb 12

gniibe committed rG6eed3959303c: agent: Fix the regression in pkdecrypt with TPM RSA. (authored by gniibe).
agent: Fix the regression in pkdecrypt with TPM RSA.
Thu, Feb 12, 4:05 AM
gniibe added a comment to T8045: Stack-based buffer overflow in TPM2 `PKDECRYPT`.

The fix causes a regression. Reported: https://lists.gnupg.org/pipermail/gnupg-devel/2026-February/036218.html

Thu, Feb 12, 2:49 AM · gnupg26, CVE, TPM, Bug Report
gniibe reopened T8045: Stack-based buffer overflow in TPM2 `PKDECRYPT` as "Open".

This is not 2.5-only.

Thu, Feb 12, 2:48 AM · gnupg26, CVE, TPM, Bug Report

Wed, Feb 11

gniibe added a comment to T8094: libgcrypt: EC least leak failure.

No, OpenBSD's implementation of POSIX semaphore is different to NetBSD.
(It doesn't support PSHARED=1.)

Wed, Feb 11, 2:51 AM · Info Needed, libgcrypt, Bug Report
gniibe added a comment to T8094: libgcrypt: EC least leak failure.

Possibly, it is related to the NetBSD failure of T8065.
If importing the secret key fails (which invokes gpg-agent), decryption cannot be succeeded.
I will check OpenBSD implementation of POSIX semaphore, if it's similar to NetBSD one.

Wed, Feb 11, 2:41 AM · Info Needed, libgcrypt, Bug Report

Tue, Feb 10

gniibe added a comment to T8066: gpgrt: Static linking support.

Investigating GNU ld, I learned that there is no easy way (~= no way) to suppress the warnings (other than 2>/dev/null). It was implemented by the special section named gnu.warning.SYM where SYM is a symbol. I think that this is not-so-good for glibc to notify its users about possible static link problem, by gnu.warning.SYM.

Tue, Feb 10, 2:42 AM · Linux, Feature Request, gpgrt

Mon, Feb 9

gniibe created T8094: libgcrypt: EC least leak failure.
Mon, Feb 9, 9:58 AM · Info Needed, libgcrypt, Bug Report

Thu, Feb 5

gniibe committed rCb7ea9e3afc9f: cipher: remove unused variable idx in _gcry_pk_get_keygrip. (authored by Rudi Heitbaum <rudi@heitbaum.com>).
cipher: remove unused variable idx in _gcry_pk_get_keygrip.
Thu, Feb 5, 4:19 AM
gniibe committed rC581478c9ef9a: sexp: Fix for use of strchr wrt const qualifier. (authored by Rudi Heitbaum <rudi@heitbaum.com>).
sexp: Fix for use of strchr wrt const qualifier.
Thu, Feb 5, 4:02 AM
gniibe committed rC3961d6c2bd2a: m4: Update ltmain.sh and m4 files. (authored by gniibe).
m4: Update ltmain.sh and m4 files.
Thu, Feb 5, 2:57 AM
gniibe committed rCdd056316ce66: Fix carry overflow in Stribog in 512-bit addition (authored by lumag).
Fix carry overflow in Stribog in 512-bit addition
Thu, Feb 5, 2:57 AM

Wed, Feb 4

gniibe committed rE97c0106a9a77: spawn:w32: Fix with GPGRT_PROCESS_*_KEEP flags. (authored by gniibe).
spawn:w32: Fix with GPGRT_PROCESS_*_KEEP flags.
Wed, Feb 4, 7:26 AM
gniibe committed rEce261e592b3b: spawn:w32: Fix preparing the environment block. (authored by gniibe).
spawn:w32: Fix preparing the environment block.
Wed, Feb 4, 7:26 AM
gniibe claimed T8052: GnuPG: First listing of secret keys is empty.

I found two issues in libgpg-error for spawning functions.

Wed, Feb 4, 7:21 AM · gpgrt, Bug Report, gpgagent, gpd5x, gnupg26
gniibe added a comment to T8065: gnupg self test hang: clean migration.

POSIX documentation never says that PSHARED=0 prevents sharing among processes. In my opinion, it still conforms to POSIX even when a PSHARED=0 semaphore can be shared between parent and child processes.

Wed, Feb 4, 1:29 AM · gpgrt, NetBSD, gnupg26, Bug Report

Tue, Feb 3

gniibe committed rC949557945cf8: mpi:ec: Don't modify POINT in _gcry_mpi_ec_get_affine. (authored by gniibe).
mpi:ec: Don't modify POINT in _gcry_mpi_ec_get_affine.
Tue, Feb 3, 7:13 AM
gniibe claimed T8080: libgcrypt 1.12.0 regression: gcry_mpi_ec_curve_point.
Tue, Feb 3, 7:10 AM · libgcrypt, Bug Report
gniibe created T8080: libgcrypt 1.12.0 regression: gcry_mpi_ec_curve_point.
Tue, Feb 3, 7:09 AM · libgcrypt, Bug Report
gniibe changed the status of T8065: gnupg self test hang: clean migration from Open to Testing.
Tue, Feb 3, 6:48 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe added a project to T8065: gnupg self test hang: clean migration: gpgrt.

In tests/migrations, (unlike tests/openpgp and tests/cms), the tests do not prepare gpg-agent, but it is gpg which invokes gpg-agent if needed.
Because of that, on NetBSD (where POSIX semaphore has a different semantics), it hangs with gpg --list-secret-key, when gpg tries to spawn the gpg-agent process.
In the old code of 2.4, it simply ignore the npth_protect and npth_unprotect when calling fork to spawn a process.
New code in libgpg-error cares about npth_protect and npth_unprotect but it was not sufficient; We need to care about NetBSD's semantics. Child process should not call npth_protect. With shared semantics, child process's calling npth_protect affects to cause parent process: it hangs.

Tue, Feb 3, 6:48 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe added a comment to T8065: gnupg self test hang: clean migration.

@wiz Thank you for your quick feedback.

Tue, Feb 3, 6:33 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe committed rE20c673e15bd7: spawn:posix: Take care of POSIX semaphore "shared" semantics. (authored by gniibe).
spawn:posix: Take care of POSIX semaphore "shared" semantics.
Tue, Feb 3, 6:31 AM
gniibe committed rE6e40339569fc: spawn:posix: Take care of POSIX semaphore "shared" semantics. (authored by gniibe).
spawn:posix: Take care of POSIX semaphore "shared" semantics.
Tue, Feb 3, 6:03 AM

Mon, Feb 2

gniibe added a comment to T8065: gnupg self test hang: clean migration.

Thank you for the log.

Mon, Feb 2, 8:14 AM · gpgrt, NetBSD, gnupg26, Bug Report

Fri, Jan 30

gniibe committed rC23345eac14d2: Register DCO for Clemens Lang. (authored by gniibe).
Register DCO for Clemens Lang.
Fri, Jan 30, 10:43 AM
gniibe committed rCffaef0be6131: jitterentropy: Include <fcntl.h> and <limits.h> (authored by heirecka).
jitterentropy: Include <fcntl.h> and <limits.h>
Fri, Jan 30, 10:43 AM
gniibe committed rC6683007d696d: kdf: Use u64. (authored by gniibe).
kdf: Use u64.
Fri, Jan 30, 10:43 AM
gniibe committed rCa60f8e43dd1b: fips: Fix memory leaks in FIPS mode (authored by Clemens Lang via Gcrypt-devel <gcrypt-devel@lists.gnupg.org>).
fips: Fix memory leaks in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rCb5b7b8c5c768: build: Fix m4/gpg-error.m4. (authored by gniibe).
build: Fix m4/gpg-error.m4.
Fri, Jan 30, 10:43 AM
gniibe committed rC2bdc6614c866: hmac: Fix memory leak (authored by Clemens Lang via Gcrypt-devel <gcrypt-devel@lists.gnupg.org>).
hmac: Fix memory leak
Fri, Jan 30, 10:43 AM
gniibe committed rC64fef2140259: Silence compiler warnings for possible alignment problem. (authored by gniibe).
Silence compiler warnings for possible alignment problem.
Fri, Jan 30, 10:43 AM
gniibe committed rC4ed49a917212: fips: Use ELF header to find hmac file offset (authored by neverpanic).
fips: Use ELF header to find hmac file offset
Fri, Jan 30, 10:43 AM
gniibe committed rCa4966208895c: fips: Fix previous commit. (authored by gniibe).
fips: Fix previous commit.
Fri, Jan 30, 10:43 AM
gniibe committed rC974f4c7e698b: fips: Integrity check improvement, with only loadable segments. (authored by gniibe).
fips: Integrity check improvement, with only loadable segments.
Fri, Jan 30, 10:43 AM
gniibe committed rCad8b67f9e219: fips: Fix gen-note-integrity.sh script not to use cmp utility. (authored by gniibe).
fips: Fix gen-note-integrity.sh script not to use cmp utility.
Fri, Jan 30, 10:43 AM
gniibe committed rCdcc6979fd2ed: fips: More portable integrity check. (authored by gniibe).
fips: More portable integrity check.
Fri, Jan 30, 10:43 AM
gniibe committed rC9fa4c8946ac5: fips: Clarify what to be hashed for the integrity check. (authored by gniibe).
fips: Clarify what to be hashed for the integrity check.
Fri, Jan 30, 10:43 AM
gniibe committed rC13b5454d2620: kdf:argon2: Fix for the case output > 64. (authored by gniibe).
kdf:argon2: Fix for the case output > 64.
Fri, Jan 30, 10:43 AM
gniibe committed rC26df4b8d8c93: cipher: Fix rsa key generation. (authored by gniibe).
cipher: Fix rsa key generation.
Fri, Jan 30, 10:43 AM
gniibe committed rC9452640125d2: random: Not use secure memory for DRBG instance. (authored by gniibe).
random: Not use secure memory for DRBG instance.
Fri, Jan 30, 10:43 AM
gniibe committed rC9c55ba3bc1ce: tests: Replace custom bit with more generic flags (authored by Jakuje).
tests: Replace custom bit with more generic flags
Fri, Jan 30, 10:43 AM
gniibe committed rCd8a13d97ccb6: Do not allow PKCS #1.5 padding for encryption in FIPS (authored by Jakuje).
Do not allow PKCS #1.5 padding for encryption in FIPS
Fri, Jan 30, 10:43 AM
gniibe committed rCf6a67c221531: cipher: Change the bounds for RSA key generation round. (authored by gniibe).
cipher: Change the bounds for RSA key generation round.
Fri, Jan 30, 10:43 AM
gniibe committed rC019a40c99011: random:drbg: Fix the behavior for child process. (authored by gniibe).
random:drbg: Fix the behavior for child process.
Fri, Jan 30, 10:43 AM
gniibe committed rC03af3d5cc5d5: mpi: Fix for 64-bit for _gcry_mpih_cmp_ui. (authored by gniibe).
mpi: Fix for 64-bit for _gcry_mpih_cmp_ui.
Fri, Jan 30, 10:43 AM
gniibe committed rC1a270cda2ee5: tests: Expect the RSA PKCS #1.5 encryption to fail in FIPS mode (authored by Jakuje).
tests: Expect the RSA PKCS #1.5 encryption to fail in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rC6d3708942f84: Fix internal declaration of _gcry_kdf_compute. (authored by gniibe).
Fix internal declaration of _gcry_kdf_compute.
Fri, Jan 30, 10:43 AM
gniibe committed rC468ffa8f9c47: cipher: Allow verification of small RSA signatures in FIPS mode (authored by Jakuje).
cipher: Allow verification of small RSA signatures in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rC4b85bf33cce7: tests: Fix copy paste error (authored by Jakuje).
tests: Fix copy paste error
Fri, Jan 30, 10:43 AM
gniibe committed rC735601494adb: Fix memory leaks in tests (authored by Jakuje).
Fix memory leaks in tests
Fri, Jan 30, 10:43 AM
gniibe committed rCbc01c770c757: random: Fix rndjent for Windows. (authored by gniibe).
random: Fix rndjent for Windows.
Fri, Jan 30, 10:43 AM
gniibe committed rCd1cb2599e9d7: mpi: Allow building with --disable-asm for HPPA. (authored by gniibe).
mpi: Allow building with --disable-asm for HPPA.
Fri, Jan 30, 10:43 AM
gniibe committed rC04960f5179cd: tests: Test gcry_pk_hash_sign w/explicit hash algo (authored by neverpanic).
tests: Test gcry_pk_hash_sign w/explicit hash algo
Fri, Jan 30, 10:43 AM
gniibe committed rC3bbcf16e0b8b: tests/t-kdf: Test KDF FIPS indicator (authored by neverpanic).
tests/t-kdf: Test KDF FIPS indicator
Fri, Jan 30, 10:43 AM
gniibe committed rCab5aef9b7b6e: hmac: Allow use of shorter salt. (authored by gniibe).
hmac: Allow use of shorter salt.
Fri, Jan 30, 10:43 AM
gniibe committed rC06c9350165d7: fips: Run digest&sign self tests for RSA and ECC in FIPS mode. (authored by Jakuje).
fips: Run digest&sign self tests for RSA and ECC in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC1d3a90a4d118: cipher: Fix gcry_pk_hash_verify for explicit hash. (authored by gniibe).
cipher: Fix gcry_pk_hash_verify for explicit hash.
Fri, Jan 30, 10:43 AM
gniibe committed rC822ee57f07ca: fips: Add function-name based FIPS indicator. (authored by Jakuje).
fips: Add function-name based FIPS indicator.
Fri, Jan 30, 10:43 AM
gniibe committed rC076a8adaf314: ecc: Run PCT also with the digest step (authored by Jakuje).
ecc: Run PCT also with the digest step
Fri, Jan 30, 10:43 AM
gniibe committed rC78151e6d6bbb: rsa: Run PCT in FIPS mode also with digest step. (authored by Jakuje).
rsa: Run PCT in FIPS mode also with digest step.
Fri, Jan 30, 10:43 AM
gniibe committed rCcf10c74bd9d5: random: Use getrandom (GRND_RANDOM) in FIPS mode. (authored by Jakuje).
random: Use getrandom (GRND_RANDOM) in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC285bf54b1ac7: Simplify the PCT for RSA and ECDSA (authored by Jakuje).
Simplify the PCT for RSA and ECDSA
Fri, Jan 30, 10:43 AM
gniibe committed rC15fb6257e827: gcrypt.h: Fix function name in comment. (authored by Jakuje).
gcrypt.h: Fix function name in comment.
Fri, Jan 30, 10:43 AM
gniibe committed rCe5bfda492ab9: fips: Disable RSA-OAEP padding in FIPS mode. (authored by Jakuje).
fips: Disable RSA-OAEP padding in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC658679e0ec8b: tests: Expect the OEAP tests to fail in FIPS mode. (authored by Jakuje).
tests: Expect the OEAP tests to fail in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC16ac1850b854: Fix _gcry_err_code_to_errno. (authored by gniibe).
Fix _gcry_err_code_to_errno.
Fri, Jan 30, 10:43 AM
gniibe committed rC44812a1d96fc: build: Fix configure script. (authored by gniibe).
build: Fix configure script.
Fri, Jan 30, 10:43 AM
gniibe committed rC4963c127ae69: fips: Skip PCT if RSA keygen test-parms specified (authored by neverpanic).
fips: Skip PCT if RSA keygen test-parms specified
Fri, Jan 30, 10:43 AM
gniibe committed rC1524b60a7ccc: build: Skip PK-specific tests if algo is disabled (authored by neverpanic).
build: Skip PK-specific tests if algo is disabled
Fri, Jan 30, 10:43 AM
gniibe committed rC9ee2d56e806b: keccak: Use size_t to avoid integer overflow (authored by Jakuje).
keccak: Use size_t to avoid integer overflow
Fri, Jan 30, 10:43 AM
gniibe committed rC52d48b710470: kdf:pkdf2: Check minimum allowed key size when running in FIPS mode. (authored by tobhe).
kdf:pkdf2: Check minimum allowed key size when running in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rCd09d3d33c79d: kdf:pkdf2: Require longer input when FIPS mode. (authored by gniibe).
kdf:pkdf2: Require longer input when FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rCce0df08bbab7: random: Get maximum 32B of entropy at once in FIPS Mode (authored by Jakuje).
random: Get maximum 32B of entropy at once in FIPS Mode
Fri, Jan 30, 10:43 AM
gniibe committed rC96615490c7b1: random: Extend the comment about FIPS specifics (authored by Jakuje).
random: Extend the comment about FIPS specifics
Fri, Jan 30, 10:43 AM
gniibe committed rCe235f38f9b9f: tests: Reproducer for short dklen in FIPS mode (authored by Jakuje).
tests: Reproducer for short dklen in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rCe2c0920fd7de: build: Update gpg-error.m4. (authored by gniibe).
build: Update gpg-error.m4.
Fri, Jan 30, 10:43 AM
gniibe committed rCe7b1fbda6a9e: hmac,hkdf: Check the HMAC key length in FIPS mode. (authored by Jakuje).
hmac,hkdf: Check the HMAC key length in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC5191379da3ad: build: Prefer gpgrt-config when available. (authored by gniibe).
build: Prefer gpgrt-config when available.
Fri, Jan 30, 10:43 AM
gniibe committed rC7f4fafb5564d: Revert "kdf:pkdf2: Require longer input when FIPS mode." (authored by Jakuje).
Revert "kdf:pkdf2: Require longer input when FIPS mode."
Fri, Jan 30, 10:43 AM
gniibe added a reverting change for rCd09d3d33c79d: kdf:pkdf2: Require longer input when FIPS mode.: rC7f4fafb5564d: Revert "kdf:pkdf2: Require longer input when FIPS mode.".
Fri, Jan 30, 10:43 AM
gniibe committed rC44789af6c23b: doc: Update document for pkg-config and libgcrypt.m4. (authored by gniibe).
doc: Update document for pkg-config and libgcrypt.m4.
Fri, Jan 30, 10:43 AM
gniibe committed rC057844700ec2: pkdf2: Add checks for FIPS. (authored by Jakuje).
pkdf2: Add checks for FIPS.
Fri, Jan 30, 10:43 AM
gniibe committed rC20ad5df60b03: fips: Mark AES key wrapping as approved. (authored by Jakuje).
fips: Mark AES key wrapping as approved.
Fri, Jan 30, 10:43 AM
gniibe committed rCfdd2a8b3329e: rsa: Prevent usage of long salt in FIPS mode (authored by Jakuje).
rsa: Prevent usage of long salt in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rC392e0ccd25f3: fips,rsa: Prevent usage of X9.31 keygen in FIPS mode. (authored by Jakuje).
fips,rsa: Prevent usage of X9.31 keygen in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rCbdeea2a53e9e: t-rsa-testparm: fix 'function declaration isn’t a prototype' warning (authored by jukivili).
t-rsa-testparm: fix 'function declaration isn’t a prototype' warning
Fri, Jan 30, 10:43 AM
gniibe committed rC7ddad4035d92: doc: Minor fix up. (authored by gniibe).
doc: Minor fix up.
Fri, Jan 30, 10:43 AM
gniibe committed rC83ea195b61d5: build: Fix configure.ac for strict C99. (authored by gniibe).
build: Fix configure.ac for strict C99.
Fri, Jan 30, 10:42 AM
gniibe committed rCb1a3424e7f80: build: Fix m4 macros for strict C compiler. (authored by gniibe).
build: Fix m4 macros for strict C compiler.
Fri, Jan 30, 10:42 AM
gniibe committed rC1540698389ba: fips: Remove GCM mode from the allowed FIPS indicators. (authored by Jakuje).
fips: Remove GCM mode from the allowed FIPS indicators.
Fri, Jan 30, 10:42 AM
gniibe committed rC44a3f26539f7: ecc: Do not allow skipping tests in FIPS Mode. (authored by Jakuje).
ecc: Do not allow skipping tests in FIPS Mode.
Fri, Jan 30, 10:42 AM