Page MenuHome GnuPG
Feed Advanced Search

Yesterday

gniibe committed rG02b056ef777c: agent:kem: Fix memory leaks. (authored by gniibe).
agent:kem: Fix memory leaks.
Thu, Apr 25, 7:35 AM
gniibe committed rG2593dcbcebbe: agent: Allow NULL for R_PADDING, when calling scd and tpm2d. (authored by gniibe).
agent: Allow NULL for R_PADDING, when calling scd and tpm2d.
Thu, Apr 25, 7:35 AM
gniibe added inline comments to rC005292cf9f41: cipher:kem:ecc: Support NIST curves..
Thu, Apr 25, 2:07 AM

Wed, Apr 24

gniibe committed rGa45243548ed3: agent:kem: Factor out ECC KEM operation from composite KEM. (authored by gniibe).
agent:kem: Factor out ECC KEM operation from composite KEM.
Wed, Apr 24, 8:10 AM
gniibe committed rGd1f8caafb4e7: agent: Simplify diverting operation to the smartcard. (authored by gniibe).
agent: Simplify diverting operation to the smartcard.
Wed, Apr 24, 8:10 AM
gniibe committed rC005292cf9f41: cipher:kem:ecc: Support NIST curves. (authored by gniibe).
cipher:kem:ecc: Support NIST curves.
Wed, Apr 24, 4:19 AM
gniibe committed rC118fa95d8d36: cipher:kem:ecc: Fix DHKEM implementation. (authored by gniibe).
cipher:kem:ecc: Fix DHKEM implementation.
Wed, Apr 24, 4:19 AM

Tue, Apr 23

gniibe committed rGaf98a3e5faf1: agent:kem: More fix for PQC KEM with X448. (authored by gniibe).
agent:kem: More fix for PQC KEM with X448.
Tue, Apr 23, 9:11 AM
gniibe committed rG65833eefb2b5: agent:kem: Support other ML-KEM variants. (authored by gniibe).
agent:kem: Support other ML-KEM variants.
Tue, Apr 23, 7:42 AM
gniibe committed rGd5c6b52e5974: agent:kem: Support other ECC curves. (authored by gniibe).
agent:kem: Support other ECC curves.
Tue, Apr 23, 7:42 AM
gniibe committed rGaa15272ba1a0: po: Update Portuguese Translation. (authored by Daniel Cerqueira <dan.git@lispclub.com>).
po: Update Portuguese Translation.
Tue, Apr 23, 2:25 AM

Mon, Apr 22

gniibe triaged T7097: Support a key on smartcard for PQC as Wishlist priority.
Mon, Apr 22, 8:12 AM · gnupg26, gpgagent, Feature Request
gniibe closed T5436: gpg-agent 2.3.1: PIN caching not working for decrypt operations as Resolved.

Please continue on T7041. This ticket is going to be closed (as the problem described was fixed already).

Mon, Apr 22, 8:09 AM · gnupg24, yubikey, Bug Report
gniibe changed the status of T7058: KDF-DO is not properly implemented from Open to Testing.

Applied to 2.4 branch.

Mon, Apr 22, 8:07 AM · scd, gnupg, Bug Report
gniibe changed the status of T7071: gpg: Support of No CRC in ASCII armor from Open to Testing.

Applied to 2.4 branch.

Mon, Apr 22, 8:05 AM · gnupg, Bug Report
gniibe added a comment to T7085: libgcrypt: New functions to support waiting time.

Here is current version:

diff --git a/src/misc.c b/src/misc.c
index 4db2d9a4..bf50b00b 100644
--- a/src/misc.c
+++ b/src/misc.c
@@ -577,3 +577,61 @@ _gcry_divide_by_zero (void)
     gpg_err_set_errno (EDOM);
     _gcry_fatal_error (gpg_err_code_from_errno (errno), "divide by zero");
 }
+
+#ifdef HAVE_CLOCK_GETTIME
+#include <time.h>
+# if defined(CLOCK_THREAD_CPUTIME_ID) && defined(CLOCK_TAI)
+struct gcry_timedwait
+{
+  clockid_t id;
+  struct timespec ts;
+};
+
+typedef struct gcry_timedwait *gcry_timedwait_t;
+
+gcry_err_code_t
+_gcry_timedwait_init (gcry_timedwait_t tw, unsigned int flags)
+{
+  /* Possibly, it would be good to be able to select the wall clock.
+   * For now, it's CPU time by the thread.  */
+  if (flags != 0)
+    return GPG_ERR_INV_ARG;
+
+  tw->id = CLOCK_THREAD_CPUTIME_ID;
+  if (clock_gettime (tw->id, &tw->ts) < 0)
+    return gpg_err_code_from_syserror ();
+
+  return 0;
+}
+
+gcry_err_code_t
+_gcry_timedwait_finish (gcry_timedwait_t tw, struct timespec ts_r)
+{
+  struct timespec ts;
+  u32 negative;
+
+  if (clock_gettime (tw->id, &ts) < 0)
+    return gpg_err_code_from_syserror ();
+
+  ts.tv_sec -= tw->ts.tv_sec;
+  ts.tv_nsec -= tw->ts.tv_nsec;
+  negative = ((u32)ts.tv_nsec) >> 31;
+  ts.tv_sec -= negative;
+  ts.tv_nsec += (1000000000 * negative);
+
+  ts_r.tv_sec -= ts.tv_sec;
+  ts_r.tv_nsec -= ts.tv_nsec;
+  negative = ((u32)ts_r.tv_nsec) >> 31;
+  ts_r.tv_sec -= negative;
+  ts_r.tv_nsec += (1000000000 * negative);
+
+  if (ts_r.tv_sec < 0)
+    return GPG_ERR_TIME_CONFLICT;
+
+  if (clock_nanosleep (CLOCK_TAI, 0, &ts_r, &ts_r))
+    return gpg_err_code_from_syserror ();
+
+  return 0;
+}
+# endif
+#endif
Mon, Apr 22, 8:01 AM · libgcrypt
gniibe committed rC9c65260f915f: cipher:kem:ecc: Support brainpoolP256r1 and brainpoolP384r1. (authored by gniibe).
cipher:kem:ecc: Support brainpoolP256r1 and brainpoolP384r1.
Mon, Apr 22, 7:45 AM

Fri, Apr 19

gniibe committed rC47f2cb8f6f35: cipher:ecc: Return the result in SEC1 point format for Weierstrass. (authored by gniibe).
cipher:ecc: Return the result in SEC1 point format for Weierstrass.
Fri, Apr 19, 10:35 AM
gniibe committed rCb1da8247dcbc: cipher:ecc: Add _gcry_ecc_curve_mul_point function with curve name. (authored by gniibe).
cipher:ecc: Add _gcry_ecc_curve_mul_point function with curve name.
Fri, Apr 19, 7:59 AM
gniibe committed rC72b1b8d447fb: cipher:kem: Rename Classic McEliece API constants. (authored by gniibe).
cipher:kem: Rename Classic McEliece API constants.
Fri, Apr 19, 3:21 AM

Thu, Apr 18

gniibe committed rC9a552b80d6c4: cipher: More clean up for Classic McEliece implementation. (authored by gniibe).
cipher: More clean up for Classic McEliece implementation.
Thu, Apr 18, 4:08 AM
gniibe committed rC6478203e77d1: cipher: Fix comments of Classic McEliece implementation. (authored by gniibe).
cipher: Fix comments of Classic McEliece implementation.
Thu, Apr 18, 4:08 AM

Wed, Apr 17

gniibe committed rC003367b91272: cipher: Add Classic McEliece mceliece6688128f. (authored by jas).
cipher: Add Classic McEliece mceliece6688128f.
Wed, Apr 17, 3:26 AM

Tue, Apr 16

gniibe added a comment to T5436: gpg-agent 2.3.1: PIN caching not working for decrypt operations.

Are you using PC/SC shared mode? If so, it may be the case of T7041.

Tue, Apr 16, 7:16 AM · gnupg24, yubikey, Bug Report
gniibe committed rCeec1a576dbd0: cipher: Fix copyright notices for Kyber implementation. (authored by gniibe).
cipher: Fix copyright notices for Kyber implementation.
Tue, Apr 16, 3:44 AM

Mon, Apr 15

gniibe added a comment to T7058: KDF-DO is not properly implemented.

@mwalle Thank you for your testing.
Applied to master.
After testing, I'll also apply to 2.4 branch.

Mon, Apr 15, 4:14 AM · scd, gnupg, Bug Report
gniibe committed rG35ef87d8d9db: scd:openpgp: Robust Data Object handling for constructed case. (authored by gniibe).
scd:openpgp: Robust Data Object handling for constructed case.
Mon, Apr 15, 4:13 AM
gniibe changed the status of T7014: agent: Enhancement of PKDECRYPT for KEM interface from Open to Testing.
Mon, Apr 15, 3:19 AM · gnupg26, gpgagent, Feature Request
gniibe changed the status of T7014: agent: Enhancement of PKDECRYPT for KEM interface, a subtask of T6815: PQC encryption for GnuPG, from Open to Testing.
Mon, Apr 15, 3:19 AM · gnupg26, OpenPGP, PQC, gnupg

Fri, Apr 12

gniibe added a comment to T7058: KDF-DO is not properly implemented.

I'm considering applying the following patch. With this change, scdaemon will works well with a card implementation which consider F9 (wrongly) as primitive data object, as well as correct card implementation.

diff --git a/scd/app-openpgp.c b/scd/app-openpgp.c
index 26ac91ea2..09223ce33 100644
--- a/scd/app-openpgp.c
+++ b/scd/app-openpgp.c
@@ -410,6 +410,10 @@ get_cached_data (app_t app, int tag,
   size_t len;
   struct cache_s *c;
   int exmode;
+  int do_constructed = 0;
+
+  if ((tag < 0x0100 && (tag & 0x20)) || (tag >= 0x0100 && (tag & 0x2000)))
+    do_constructed = 1;
Fri, Apr 12, 9:01 AM · scd, gnupg, Bug Report
gniibe added a comment to T7085: libgcrypt: New functions to support waiting time.

API which does not require allocation internally would be better. In this case, it is allocated on stack by the caller.

Fri, Apr 12, 8:07 AM · libgcrypt
gniibe added a comment to T7085: libgcrypt: New functions to support waiting time.

I mean, something like this (for GNU/Linux):

diff --git a/src/misc.c b/src/misc.c
index 4db2d9a4..74864334 100644
--- a/src/misc.c
+++ b/src/misc.c
@@ -577,3 +577,80 @@ _gcry_divide_by_zero (void)
     gpg_err_set_errno (EDOM);
     _gcry_fatal_error (gpg_err_code_from_errno (errno), "divide by zero");
 }
+
+#ifdef HAVE_CLOCK_GETTIME
+#include <time.h>
+# if defined(CLOCK_THREAD_CPUTIME_ID) && defined(CLOCK_TAI)
+struct gcry_timedwait
+{
+  struct timespec ts;
+};
+
+typedef struct gcry_timedwait *gcry_timedwait_t;
+
+gcry_err_code_t
+_gcry_timedwait_new (gcry_timedwait_t *r_tw, unsigned int flags)
+{
+  gcry_err_code_t err;
+  gcry_timedwait_t tw;
+
+  *r_tw = NULL;
+
+  /* Possibly, it would be good to be able to select the wall clock.
+   * For now, it's CPU time by the thread.  */
+  if (flags != 0)
+    return GPG_ERR_INV_ARG;
+
+  tw = xtrymalloc (sizeof (gcry_timedwait_t));
+  if (!tw)
+    return gpg_err_code_from_syserror ();
+
+  if (clock_gettime (CLOCK_THREAD_CPUTIME_ID, &tw->ts) < 0)
+    {
+      err = gpg_err_code_from_syserror ();
+      xfree (tw);
+      return err;
+    }
+
+  *r_tw = tw;
+  return 0;
+}
+
+gcry_err_code_t
+_gcry_timedwait_release (gcry_timedwait_t tw, struct timespec ts_r)
+{
+  gcry_err_code_t err;
+  struct timespec ts;
+  u32 negative;
+
+  if (clock_gettime (CLOCK_THREAD_CPUTIME_ID, &ts) < 0)
+    {
+      err = gpg_err_code_from_syserror ();
+      xfree (tw);
+      return err;
+    }
+
+  ts.tv_sec -= tw->ts.tv_sec;
+  ts.tv_nsec -= tw->ts.tv_nsec;
+  negative = ((u32)ts.tv_nsec) >> 31;
+  ts.tv_sec -= negative;
+  ts.tv_nsec += (1000000000 * negative);
+
+  xfree (tw);
+
+  ts_r.tv_sec -= ts.tv_sec;
+  ts_r.tv_nsec -= ts.tv_nsec;
+  negative = ((u32)ts_r.tv_nsec) >> 31;
+  ts_r.tv_sec -= negative;
+  ts_r.tv_nsec += (1000000000 * negative);
+
+  if (ts_r.tv_sec < 0)
+    return GPG_ERR_TIME_CONFLICT;
+
+  if (clock_nanosleep (CLOCK_TAI, 0, &ts_r, &ts_r))
+    return gpg_err_code_from_syserror ();
+
+  return 0;
+}
+# endif
+#endif
Fri, Apr 12, 5:07 AM · libgcrypt
gniibe triaged T7085: libgcrypt: New functions to support waiting time as Wishlist priority.
Fri, Apr 12, 5:04 AM · libgcrypt

Thu, Apr 11

gniibe committed rG172d53d63689: agent: Fix PQC decryption. (authored by gniibe).
agent: Fix PQC decryption.
Thu, Apr 11, 8:30 AM
gniibe committed rGf2fd4f1a9eaf: agent: Rename the function using the word "composite" (authored by gniibe).
agent: Rename the function using the word "composite"
Thu, Apr 11, 8:30 AM
gniibe added a comment to T7014: agent: Enhancement of PKDECRYPT for KEM interface.

I had wrong interpretation about symmetric cipher algorithm identifier in the draft. It specifies symmetric cipher for the following Symmetrically Encrypted Data Packet (I was wrongly interpret as if it were specifying algo for AES keywrap).

Thu, Apr 11, 8:21 AM · gnupg26, gpgagent, Feature Request

Wed, Apr 10

gniibe added a comment to T7014: agent: Enhancement of PKDECRYPT for KEM interface.

I merged the change by Werner to get the value from frontend.

Wed, Apr 10, 5:57 AM · gnupg26, gpgagent, Feature Request
gniibe committed rGaee6b1131b53: common: Rename to kem.c from kmac.c. (authored by gniibe).
common: Rename to kem.c from kmac.c.
Wed, Apr 10, 5:55 AM
gniibe committed rGc21237ac2722: agent:kem: Externalize FIXED_INFO. (authored by gniibe).
agent:kem: Externalize FIXED_INFO.
Wed, Apr 10, 5:55 AM
gniibe committed rG04b81ec236cf: common,agent: Factor out KEM functions into common/kem.c. (authored by gniibe).
common,agent: Factor out KEM functions into common/kem.c.
Wed, Apr 10, 5:55 AM

Tue, Apr 9

gniibe committed rC40b4781022c5: cipher: Add X448 based ECC KEM. (authored by gniibe).
cipher: Add X448 based ECC KEM.
Tue, Apr 9, 9:14 AM
gniibe added a comment to T7014: agent: Enhancement of PKDECRYPT for KEM interface.

In the current code, just for testing against the test vector in m https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-pqc-02, there are specific value in the key combiner KDF.
Namely, the value 105 for fixedInfo is defined in the draft (and it will be changed).

Tue, Apr 9, 7:21 AM · gnupg26, gpgagent, Feature Request
gniibe added a comment to T7071: gpg: Support of No CRC in ASCII armor.

Applied to master. If no problem will be found, I'll apply to 2.4 branch too.
Let's see.

Tue, Apr 9, 7:16 AM · gnupg, Bug Report
gniibe committed rG3a344d623652: gpg: Allow no CRC24 checksum in armor. (authored by gniibe).
gpg: Allow no CRC24 checksum in armor.
Tue, Apr 9, 2:26 AM

Mon, Apr 8

gniibe updated the task description for T7071: gpg: Support of No CRC in ASCII armor.
Mon, Apr 8, 4:36 AM · gnupg, Bug Report

Fri, Apr 5

gniibe added a comment to T7071: gpg: Support of No CRC in ASCII armor.

The following patch works.

Fri, Apr 5, 9:32 AM · gnupg, Bug Report
gniibe added a comment to T7014: agent: Enhancement of PKDECRYPT for KEM interface.

I use this for testing:

Fri, Apr 5, 8:22 AM · gnupg26, gpgagent, Feature Request
gniibe committed rG131dd2a35145: agent: Add initial support for hybrid ECC+PQC decryption with KEM. (authored by gniibe).
agent: Add initial support for hybrid ECC+PQC decryption with KEM.
Fri, Apr 5, 7:21 AM

Thu, Apr 4

gniibe claimed T7071: gpg: Support of No CRC in ASCII armor.
Thu, Apr 4, 9:03 AM · gnupg, Bug Report
gniibe created T7071: gpg: Support of No CRC in ASCII armor.
Thu, Apr 4, 9:02 AM · gnupg, Bug Report

Wed, Apr 3

gniibe committed rCa78dcad69872: tests: Fix t-kem for tests with X25519 for FIPS mode. (authored by gniibe).
tests: Fix t-kem for tests with X25519 for FIPS mode.
Wed, Apr 3, 7:53 AM

Mon, Apr 1

gniibe committed rC5da6c63fed34: cipher:kem: Add ECC KEM for X25519. (authored by gniibe).
cipher:kem: Add ECC KEM for X25519.
Mon, Apr 1, 9:28 AM
gniibe committed rGc69363e8c7b6: agent: Add --another option for hybrid crypto. (authored by gniibe).
agent: Add --another option for hybrid crypto.
Mon, Apr 1, 8:24 AM

Fri, Mar 29

gniibe committed rG1fa24e2841dd: common: Add KMAC. (authored by gniibe).
common: Add KMAC.
Fri, Mar 29, 7:28 AM

Thu, Mar 28

gniibe committed rCb81076beba28: tests:basic: Add cSHAKE test vectors. (authored by gniibe).
tests:basic: Add cSHAKE test vectors.
Thu, Mar 28, 2:53 AM
gniibe committed rC065b3f4e0271: md: Add cSHAKE digest algorithm and the implementation. (authored by gniibe).
md: Add cSHAKE digest algorithm and the implementation.
Thu, Mar 28, 2:53 AM

Mar 27 2024

gniibe added a comment to T7058: KDF-DO is not properly implemented.

Given the situation where GnuPG works well with existing OpenPGP card implementations, what we should do here is, perhaps:

Mar 27 2024, 2:37 AM · scd, gnupg, Bug Report
gniibe committed rG984a0c6982cc: scd:openpgp: Fix data_objects specification for F9 and FA. (authored by gniibe).
scd:openpgp: Fix data_objects specification for F9 and FA.
Mar 27 2024, 2:28 AM
gniibe added a comment to T7058: KDF-DO is not properly implemented.

There are multiple problems described in your report. Let us handle one by one.

Mar 27 2024, 2:24 AM · scd, gnupg, Bug Report
gniibe committed rPTHf1021c211e33: MacOS: Add fallback implementation for POSIX semaphore API. (authored by gniibe).
MacOS: Add fallback implementation for POSIX semaphore API.
Mar 27 2024, 2:00 AM
gniibe changed the status of T7057: Npth needs adaptions to old Mac OS X versions from Open to Testing.

Thank you for your quick testing.

Mar 27 2024, 1:30 AM · MacOS, npth

Mar 26 2024

gniibe added a comment to T7057: Npth needs adaptions to old Mac OS X versions.

The patches looks too large to merge (than actually needed), and not enough/clean like not having detection of the system.

Mar 26 2024, 3:37 AM · MacOS, npth

Mar 25 2024

gniibe claimed T7057: Npth needs adaptions to old Mac OS X versions.
Mar 25 2024, 10:10 AM · MacOS, npth
gniibe added a comment to T7014: agent: Enhancement of PKDECRYPT for KEM interface.

On March 11 and 18, the private key file DE1AB1D22899CEC7DBB1A7863F34E6E92BFB7756.key was wrong.
I updated on March 25. Now, the endian is GnuPG (d is big endian).

Mar 25 2024, 8:04 AM · gnupg26, gpgagent, Feature Request
gniibe commandeered D595: Bump gettext version to 0.21.
Mar 25 2024, 7:51 AM
gniibe added a comment to D595: Bump gettext version to 0.21.

Thank you for the reminder. I will update the version in configure.ac for AM_GNU_GETTEXT_VERSION, when I will confirm other developers' emvironment.

Mar 25 2024, 7:49 AM

Mar 19 2024

gniibe added a comment to T7044: Deadlock on Windows in sdaemon.

There are two locks here; (1) rw_lock for card_top (list of cards) access and (2) individual card lock.
It looks for me that:

  • don't know how/what the thread 7208.2 does
  • the thread 7208.3: KEYINFO, then PKSIGN (gets read lock for card_top, then, individual card lock)
  • the thread 7208.4: SERIALNO --all (and wait for write lock for card_top)
Mar 19 2024, 7:33 AM · Bug Report, Windows, gnupg24

Mar 18 2024

gniibe added a comment to T7014: agent: Enhancement of PKDECRYPT for KEM interface.

I extracted data from https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-pqc-02 and compose x25519 key and MLKEM768 key. Here they are.
x25519 :


MLKEM768 :

Mar 18 2024, 7:21 AM · gnupg26, gpgagent, Feature Request

Mar 13 2024

gniibe claimed T7041: Yubikey (PGP + PIV) --pcsc-shared: PIN requires every time.

This rejection could be relaxed.

Mar 13 2024, 8:00 AM · yubikey, gnupg24, scd, Bug Report
gniibe created T7041: Yubikey (PGP + PIV) --pcsc-shared: PIN requires every time.
Mar 13 2024, 7:59 AM · yubikey, gnupg24, scd, Bug Report

Mar 11 2024

gniibe committed rC3d48e6e37b04: Add gcry_md_hash_buffers_ext function. (authored by gniibe).
Add gcry_md_hash_buffers_ext function.
Mar 11 2024, 3:52 AM
gniibe claimed T7035: libgcrypt: New function gcry_md_hash_buffers_ext (for extendable-output function).
Mar 11 2024, 3:28 AM · libgcrypt, Feature Request, Bug Report
gniibe created T7035: libgcrypt: New function gcry_md_hash_buffers_ext (for extendable-output function).
Mar 11 2024, 3:28 AM · libgcrypt, Feature Request, Bug Report

Mar 7 2024

gniibe added a comment to T7014: agent: Enhancement of PKDECRYPT for KEM interface.

As a first experiment, let us use CIPHERTEXT in the format of (enc-val(ecdh(s%m)(e%m)(k%m))) (s: encrypted-session-key, e: ecc ephemeral key, k: kyber ephemeral key).

Mar 7 2024, 7:37 AM · gnupg26, gpgagent, Feature Request
gniibe committed rC7f346ee6eb8c: doc: Fix the function name gcry_md_extract. (authored by gniibe).
doc: Fix the function name gcry_md_extract.
Mar 7 2024, 1:44 AM

Mar 5 2024

gniibe committed rCf4bcc69c3c9b: kem: Fix the previous commit. (authored by gniibe).
kem: Fix the previous commit.
Mar 5 2024, 12:48 AM
gniibe added inline comments to rC47c594386ebe: cipher: Fix Kyber key in SEXP, and its keygrip computation..
Mar 5 2024, 12:45 AM

Mar 4 2024

gniibe added inline comments to rC47c594386ebe: cipher: Fix Kyber key in SEXP, and its keygrip computation..
Mar 4 2024, 10:05 AM
gniibe committed rC47c594386ebe: cipher: Fix Kyber key in SEXP, and its keygrip computation. (authored by gniibe).
cipher: Fix Kyber key in SEXP, and its keygrip computation.
Mar 4 2024, 5:12 AM
gniibe added a comment to T7022: libgcrypt-1.10.3 regression on hppa.

Applied to both (master and 1.10 branch).

Mar 4 2024, 1:11 AM · libgcrypt, Gentoo, hppa, Bug Report
gniibe committed rCb757f4130af9: mpi: Fix ECC computation on hppa. (authored by gniibe).
mpi: Fix ECC computation on hppa.
Mar 4 2024, 1:05 AM

Mar 3 2024

gniibe committed rC23ccf8eafbc4: tests: Fix the previous commit. (authored by gniibe).
tests: Fix the previous commit.
Mar 3 2024, 2:23 AM

Mar 2 2024

gniibe committed rC58f93ea56f71: tests: Fix keygen for FIPS mode. (authored by gniibe).
tests: Fix keygen for FIPS mode.
Mar 2 2024, 3:38 AM

Mar 1 2024

gniibe changed the status of T7003: 2.2 gpg-agent doesn't allow KEYINFO when restricted (was: gpgme-1.23.2 test failure (t-json)) from Open to Testing.
Mar 1 2024, 6:09 AM · gpgagent, gnupg22, gpgme, Gentoo, Bug Report
gniibe committed rGf50c543326c2: agent: Allow simple KEYINFO command when restricted. (authored by gniibe).
agent: Allow simple KEYINFO command when restricted.
Mar 1 2024, 6:09 AM
gniibe added a comment to T7003: 2.2 gpg-agent doesn't allow KEYINFO when restricted (was: gpgme-1.23.2 test failure (t-json)).

Pushed the change in: rGf50c543326c2: agent: Allow simple KEYINFO command when restricted.

Mar 1 2024, 6:08 AM · gpgagent, gnupg22, gpgme, Gentoo, Bug Report
gniibe committed rPTH417abd56fd7b: Fix INSERT_EXPOSE_RWLOCK_API for musl C library. (authored by gniibe).
Fix INSERT_EXPOSE_RWLOCK_API for musl C library.
Mar 1 2024, 6:04 AM
gniibe changed the status of T5664: npth-1.6: error: unknown type name ‘pthread_rwlock_t’ from Open to Testing.

Apply the change in: rPTH417abd56fd7b: Fix INSERT_EXPOSE_RWLOCK_API for musl C library.

Mar 1 2024, 5:58 AM · npth, Bug Report
gniibe claimed T7016: scdaemon: Sometimes a newly detected card is immediately considered removed.

It looks like hardware problem or card reader problem.
Please test with debug-ccid-driver line in scdaemon.conf to see lower-lever (driver debug) message.

Mar 1 2024, 5:10 AM · scd, Restricted Project, Bug Report
gniibe changed the status of T7022: libgcrypt-1.10.3 regression on hppa from Open to Testing.

Since I don't like to introduce hppa specific workaround in a way like pragma (and I have no time to fix compiler itself), I tried to improve the ec-nist.c for hppa so that register pressure can be lower.
Here is my solution.

Mar 1 2024, 2:34 AM · libgcrypt, Gentoo, hppa, Bug Report

Feb 29 2024

gniibe committed rC813a96de4ffe: mpi: Silence warning for some architecture. (authored by gniibe).
mpi: Silence warning for some architecture.
Feb 29 2024, 7:49 AM
gniibe renamed T7003: 2.2 gpg-agent doesn't allow KEYINFO when restricted (was: gpgme-1.23.2 test failure (t-json)) from gpgme-1.23.2 test failure (t-json) to 2.2 gpg-agent doesn't allow KEYINFO when restricted (was: gpgme-1.23.2 test failure (t-json)).
Feb 29 2024, 7:34 AM · gpgagent, gnupg22, gpgme, Gentoo, Bug Report
gniibe triaged T7003: 2.2 gpg-agent doesn't allow KEYINFO when restricted (was: gpgme-1.23.2 test failure (t-json)) as High priority.
Feb 29 2024, 7:33 AM · gpgagent, gnupg22, gpgme, Gentoo, Bug Report
gniibe added a comment to T5664: npth-1.6: error: unknown type name ‘pthread_rwlock_t’.

@thesamesam Thank you for the report.

Feb 29 2024, 7:31 AM · npth, Bug Report
gniibe reopened T5664: npth-1.6: error: unknown type name ‘pthread_rwlock_t’ as "Open".
Feb 29 2024, 6:33 AM · npth, Bug Report
gniibe added projects to T7003: 2.2 gpg-agent doesn't allow KEYINFO when restricted (was: gpgme-1.23.2 test failure (t-json)): gnupg22, gpgagent.

Thanks a lot for your quick testing.
The commit rGff42ed0d69bb: gpg: Enhance agent_probe_secret_key to return bigger value. of GnuPG 2.2 introduced this bug.

Feb 29 2024, 5:48 AM · gpgagent, gnupg22, gpgme, Gentoo, Bug Report
gniibe added a comment to T7022: libgcrypt-1.10.3 regression on hppa.

Alternatively (more narrow workaround), when I add a line:

#pragma GCC optimize("O1")

before the function _gcry_mpi_ec_nist256_mod in mpi/ec-nist.c, it works for me on panama.debian.net (Debian porterbox for hppa).

Feb 29 2024, 5:27 AM · libgcrypt, Gentoo, hppa, Bug Report
gniibe closed T6992: Fix possible uninitialized err variable in libskba der builder as Resolved.

Fixed in libksba 1.6.6.

Feb 29 2024, 2:08 AM · libksba, Bug Report
gniibe closed T5664: npth-1.6: error: unknown type name ‘pthread_rwlock_t’ as Resolved.

Fixed in npth 1.7.

Feb 29 2024, 2:01 AM · npth, Bug Report

Feb 28 2024

gniibe added a comment to T7003: 2.2 gpg-agent doesn't allow KEYINFO when restricted (was: gpgme-1.23.2 test failure (t-json)).

You can get more information by applying a patch below (and also tests/json/Makefile.in):

diff --git a/tests/json/Makefile.am b/tests/json/Makefile.am
index 90fba79e..7523bb6b 100644
--- a/tests/json/Makefile.am
+++ b/tests/json/Makefile.am
@@ -106,6 +106,8 @@ gpg-agent.conf:
 # a key from a smartcard reader (error might be: Unusable secret key)
 	echo pinentry-program $(abs_srcdir)/../gpg/pinentry > ./gpg-agent.conf
 	echo disable-scdaemon >> ./gpg-agent.conf
+	echo debug-all >> ./gpg-agent.conf
+	echo log-file /tmp/gpg-agent-logfile.log >> ./gpg-agent.conf
Feb 28 2024, 7:24 AM · gpgagent, gnupg22, gpgme, Gentoo, Bug Report