Thanks for the offer. However, the core developers are using tokens for more than a decade meanwhile. We even make our own tokens ;-).
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Dec 12 2021
Dec 12 2021
MangoCats renamed T5730: During make, compile error under Ubuntu 21.10 from During make, compile Error under Ubuntu 21.10 to During make, compile error under Ubuntu 21.10.
• werner edited projects for T5729: Crypto tokens for GnuPG maintainers - an offer, added: dev.gnupg.org; removed Feature Request.
Dec 11 2021
Dec 11 2021
Albert Astals Cid <aacid@kde.org> committed rKLEOPATRAac014d57237f: GIT_SILENT Update Appstream for new release (authored by Albert Astals Cid <aacid@kde.org>).
GIT_SILENT Update Appstream for new release
Dec 10 2021
Dec 10 2021
Hi jukivili,
• werner closed T5726: Setting "compliance de-vs" in gpg.conf with libgcrypt 1.9.0 and newer causes confusing error messages as Resolved.
The first is a warning and the other error codes are exactly what we want.
• ikloecker committed rMf3177d3ee0a1: cpp,tests: Add test runner for doing a WKD lookup without import (authored by • ikloecker).
cpp,tests: Add test runner for doing a WKD lookup without import
• ikloecker moved T5728: qgpgme: Add support for doing a WKD lookup without implicit import from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• ikloecker triaged T5728: qgpgme: Add support for doing a WKD lookup without implicit import as Normal priority.
• ikloecker closed T5727: gpgme: Add support for dirmngr (and all other components) to dirinfo(), a subtask of T5334: Kleopatra: Add more support for WKS / WKD, as Resolved.
• ikloecker committed rM5f1ba4011619: cpp: Add new supported components to API docs of dirInfo() (authored by • ikloecker).
cpp: Add new supported components to API docs of dirInfo()
• ikloecker committed rM0ac3679a7450: core: Support all components with dirinfo() (authored by • ikloecker).
core: Support all components with dirinfo()
• ikloecker triaged T5727: gpgme: Add support for dirmngr (and all other components) to dirinfo() as Normal priority.
gpg: Emit compatible Ed25519 signature.
• gniibe added a project to T5331: Possibly incompatible Ed25519 signature between other implementations and 2.3-bata: Restricted Project.
• gniibe added a comment to T5331: Possibly incompatible Ed25519 signature between other implementations and 2.3-bata.
Adding comments, fixing "const" qualifier, I pushed the change.
Laurent Montel <montel@kde.org> committed rLIBKLEOf800b4721eff: GIT_SILENT: prepare 21.12.1 (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 21.12.1
Thank you, applied.
• gniibe committed rC02583e1216bc: tests: Include the new input files for tests (authored by Jakuje).
tests: Include the new input files for tests
Dec 9 2021
Dec 9 2021
Albert Astals Cid <aacid@kde.org> committed rKLEOPATRA46f871e4ac41: GIT_SILENT Update Appstream for new release (authored by Albert Astals Cid <aacid@kde.org>).
GIT_SILENT Update Appstream for new release
build: Fix encryption of installers
It turned out that the new *.inp files are not part of the release tarball, which makes the tests from generated tarball fail. The attached patch should fix this issue.
Yuri Chornoivan <yurchor@ukr.net> committed rKLEOPATRA9f75889b3e36: Fix minor typo (authored by Yuri Chornoivan <yurchor@ukr.net>).
Fix minor typo
• gniibe added a comment to T5331: Possibly incompatible Ed25519 signature between other implementations and 2.3-bata.
A patch created:
0001-gpg-Emit-compatible-Ed25519-signature.patch3 KBDownload
• gniibe committed rC7d8403b59a10: tests,fips: Align the use of variable in_fips_mode. (authored by • gniibe).
tests,fips: Align the use of variable in_fips_mode.
• gniibe committed rC5b82f4b4dbf3: Adjust tests for proper disablement of non-approve PK operations (authored by Jakuje).
Adjust tests for proper disablement of non-approve PK operations
Thank you, applied.
Dec 8 2021
Dec 8 2021
Laurent Montel <montel@kde.org> committed rLIBKLEO11cb53668995: GIT_SILENT: fix some reuse lint warning (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: fix some reuse lint warning
Sorry for the noise. There were couple of other places which I missed initially and which are covered in the v2 patch which follows:
It turns out together with rCe96980022e5e some tests are failing in FIPS mode. The attached patch should handle the failures.
• gniibe added a comment to T5331: Possibly incompatible Ed25519 signature between other implementations and 2.3-bata.
GnuPG 2.2 does:
- In g10/sign.c:do_sign, it keeps leading zeros for Ed25519 signature, as opaque MPI
- In g10/build-packet.c:do_signature which calls gpg_mpi_write to output the (opaque) MPI, leading zeros are removed.
• gniibe added a comment to T5699: libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl and macOS.
Let me explain concretely.
While testing I noticed that another requirement was to hide the advanced button. I have added this myself.
• aheinecke committed rKLEOPATRA2dd2f9820f55: Add setting to hide advanced options for new keys (authored by • aheinecke).
Add setting to hide advanced options for new keys
outer added a comment to T5699: libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl and macOS.
Excuse me NIBE san. What if any action do you expect me to take on this matter?
__outer
Reading compressed point format has been done.
If writing support is needed, please open another task.
• gniibe added a project to T5572: gnupg1: Missing extern-inline.m4 for gl_EXTERN_INLINE: Restricted Project.
• gniibe added a project to T5617: fips: Check library integrity before running selftests: Restricted Project.
• gniibe renamed T5699: libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl and macOS from libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl to libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl and macOS.
• gniibe added a project to T5699: libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl and macOS: Restricted Project.
• gniibe added a project to T5714: tests: Do not run tests for algorithms that are not built-in: Restricted Project.
• gniibe added a project to T4894: FIPS: RSA/DSA/ECDSA are missing hashing operation: Restricted Project.
• gniibe triaged T5636: Run integrity checks + selftests from library constructor in FIPS as Normal priority.
Laurent Montel <montel@kde.org> committed rKLEOPATRA8458194b302f: GIT_SILENT: fix some reuse lint warnings (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: fix some reuse lint warnings
• gniibe lowered the priority of T5576: New set of API for public key cryptography from High to Wishlist.
This new API is not for FIPS directly (any more), as we introduced pk_hash_sign/verify for FIPS.
• gniibe removed a parent task for T5576: New set of API for public key cryptography: T4894: FIPS: RSA/DSA/ECDSA are missing hashing operation.
Pushed the backport.
• gniibe committed rCa0a2b6796f58: tests: Add tests for gcry_pk_hash_sign/verify API. (authored by • gniibe).
tests: Add tests for gcry_pk_hash_sign/verify API.
I have been convinced disabling DSA makes more sense.
fips: Disable DSA in FIPS mode.
Done.
(Actually, it's not in the tarball.)
random: Remove random-fips.c from repo.
Dec 7 2021
Dec 7 2021
Hi jukivili,
I ran some basic tests and it did show the errors. I am in the process investigating what went wrong. In the meantime, i also included test result that I have used in my testing from bench-slope. In this test, I captured the message with 272 bytes buffer from the original libgcrypt repo and my optimized repo. Note that the bulk version of my code do 8x unrolling and the rest will do 16 bytes. So the first 2 128 bytes ran thru gcry_ppc_aes_gcm_encrypt and the rest of the 16 bytes thru gcm_ctr_encrypt (cipher-gcm.c).
libgcrypt_test_opt.log4 KBDownload
Laurent Montel <montel@kde.org> committed rLIBKLEOe3187458cdd9: GIT_SILENT: prepare for the future CMakePreset qt6 build (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare for the future CMakePreset qt6 build
Laurent Montel <montel@kde.org> committed rKLEOPATRAf2c49b452b11: GIT_SILENT: prepare for the future CMakePreset qt6 build (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare for the future CMakePreset qt6 build
• werner added a project to T5724: gpgconf --show-configs does not show the registry values : Windows.
• werner triaged T5724: gpgconf --show-configs does not show the registry values as Normal priority.
Jakuje renamed T5720: The libgpg-error is using old inet_addr() unconditionally from The libgpg-error is using old inet_pton() unconditionally to The libgpg-error is using old inet_addr() unconditionally.
• ikloecker committed rM1a1e9145877a: cpp: Factor out common code of GpgME::engineInfo() overloads (authored by • ikloecker).
cpp: Factor out common code of GpgME::engineInfo() overloads
• ikloecker committed rM0eddc867c31d: cpp: Return engine info for engine used by the context (authored by • ikloecker).
cpp: Return engine info for engine used by the context
Bump LTS version to 3.1.21
Minor spelling fix in l10n
Hmm,
$ gpg --with-colons --list-config curve cfg:curve:cv25519;ed25519;cv448;ed448;nistp256;nistp384;nistp521;brainpoolP256r1;brainpoolP384r1;brainpoolP512r1;secp256k1
How would Kleopatra know that cv* is for encryption, ed* is for signing, and all other curves are for both uses? Or are the cv/ed prefixes a (de facto) standard?
• gniibe committed rC05472c1882df: build: cipher/Makefile.am, doc/Makefile.am: add a missing space (authored by Alexander Kanavin <alex.kanavin@gmail.com>).
build: cipher/Makefile.am, doc/Makefile.am: add a missing space
po: Update Japanese Translation.
• gniibe committed rG14de7b1e5904: gpg: Accept Ed25519 private key in SOS which reserves leading zeros. (authored by • gniibe).
gpg: Accept Ed25519 private key in SOS which reserves leading zeros.
• gniibe triaged T5721: gpg22: Update *.m4 to prefer use of gpgrt-config and *.pc to *-config as Wishlist priority.
• gniibe renamed T5034: dev: Deprecate libassuan-config, libgcrypt-config, ksba-config, ntbtls-config, npth-config, and gpg-error-config from dev: Deprecate libassuan-config, libgcrypt-config, ksba-config, ntbtls-config, npth-config, ang gpg-error-config to dev: Deprecate libassuan-config, libgcrypt-config, ksba-config, ntbtls-config, npth-config, and gpg-error-config.
• gniibe added a project to T5120: Incompatible Ed25519 secret key (no-encryption): Restricted Project.
You may run
For GnuPG 2.2, it's better to be conservative (least change of behavior, if any).
We have tests in gniibe/new-pk-api, which can be backported.
- t-dsa
- t-ecdsa
- t-rsa-pss
- t-rsa-15
Thank you, applied.
md: Fix disabled check.
• gniibe committed rCe96980022e5e: Properly enforce disablement in other pubkey API (authored by Jakuje).
Properly enforce disablement in other pubkey API
tests: Add paren for readability.
• gniibe committed rC3152a565d9a4: md: Fix checking to use ->disabled instead of ->fips directly. (authored by • gniibe).
md: Fix checking to use ->disabled instead of ->fips directly.
• gniibe added a comment to T5706: libgcrypt: random: Remove the feature getting randomness from random daemon.
The patch has been applied.