Feed All Stories
Mar 14 2022
Mar 14 2022
Laurent Montel <montel@kde.org> committed rKLEOPATRA11d25c8c9b88: GIT_SILENT: time to increase version (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: time to increase version
Mar 12 2022
Mar 12 2022
Laurent Montel <montel@kde.org> committed rLIBKLEOde12c129ac5c: GIT_SILENT: prepare 5.20beta (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 5.20beta
Laurent Montel <montel@kde.org> committed rKLEOPATRAf7e55f8acf19: GIT_SILENT: prepare 5.20beta (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 5.20beta
Valodim added a comment to T5813: Locating Keys via WKD with gpg4win fails with unknown error..
@mieth sorry for the delay. meanwhile I adjusted the ciphersuite of the WKD gateway to include an AES-CBC suite. would be interested if it works now on the setup you tested before.
Laurent Montel <montel@kde.org> committed rLIBKLEO2ed97c744556: GIT_SILENT: Prepare beta1 (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: Prepare beta1
Laurent Montel <montel@kde.org> committed rKLEOPATRAfc9f8cb9c5b9: GIT_SILENT: Prepare beta1 (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: Prepare beta1
Albert Astals Cid <aacid@kde.org> committed rKLEOPATRA4726377ea9ad: GIT_SILENT Upgrade release service version to 22.07.70. (authored by Albert Astals Cid <aacid@kde.org>).
GIT_SILENT Upgrade release service version to 22.07.70.
Albert Astals Cid <aacid@kde.org> committed rKLEOPATRA7ff9c0498be6: GIT_SILENT Upgrade release service version to 22.03.80. (authored by Albert Astals Cid <aacid@kde.org>).
GIT_SILENT Upgrade release service version to 22.03.80.
jukivili updated the task description for T4460: libgcrypt performance TODOs.
jukivili updated the task description for T4460: libgcrypt performance TODOs.
Fix building sha512-avx512 with clang
Mar 11 2022
Mar 11 2022
SHA512: Add AVX512 implementation
bernhard committed rW840b0eeb2570: Remove Jan-Oliver as Geschäftsführer Intevation (authored by bernhard).
Remove Jan-Oliver as Geschäftsführer Intevation
• aheinecke added a comment to T5877: Dependency of libexpat-1.dll.
I think this is because we install pinentry-gtk, too. So we have that GTK dependency.
Laurent Montel <montel@kde.org> committed rLIBKLEOd9119e21f6a7: GIT_SILENT: add coverage support in CMakePresets.json (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: add coverage support in CMakePresets.json
Laurent Montel <montel@kde.org> committed rKLEOPATRA0c18ce9291d1: GIT_SILENT: add coverage support in CMakePresets.json (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: add coverage support in CMakePresets.json
Fix previous commit.
• gniibe added a comment to rG934864d399bb: scd: Enhance PASSWD command to accept KEYGRIP optionally..
Thank you for your comment.
Mar 10 2022
Mar 10 2022
• ikloecker committed rKLEOPATRA0d2cb43c681c: Focus first unresolved recipient if validation fails (authored by • ikloecker).
Focus first unresolved recipient if validation fails
• ikloecker closed T5876: Kleopatra: Make certificate selection dialog accessible, a subtask of T5824: Kleopatra: Full accessibility support, as Resolved.
• ikloecker committed rLIBKLEOcba503affb7c: More accessible text representations for not applicable model entries (authored by • ikloecker).
More accessible text representations for not applicable model entries
• ikloecker committed rKLEOPATRAcbc7d23be891: Filter certificate list with name/email of current key/group (authored by • ikloecker).
Filter certificate list with name/email of current key/group
• ikloecker committed rKLEOPATRA52f4d78fd5b9: Ensure correct tab order of the subwidgets of the tab widget (authored by • ikloecker).
Ensure correct tab order of the subwidgets of the tab widget
• ikloecker committed rKLEOPATRAb2ef95720196: Do not crash if certificate selection dialog is opened a second time (authored by • ikloecker).
Do not crash if certificate selection dialog is opened a second time
• ikloecker committed rKLEOPATRA12514b87b064: Improve accessible names of dialog buttons (authored by • ikloecker).
Improve accessible names of dialog buttons
• ikloecker committed rKLEOPATRA175ba9b74ecb: Give default tab of certificate list a non-empty title (authored by • ikloecker).
Give default tab of certificate list a non-empty title
• ikloecker committed rKLEOPATRA6f6d1e54933d: Fix wrong text if multi selection is allowed (authored by • ikloecker).
Fix wrong text if multi selection is allowed
• ikloecker committed rKLEOPATRAe92e31289efc: Fix setting accessible name of recipient key input field (authored by • ikloecker).
Fix setting accessible name of recipient key input field
• ikloecker moved T5876: Kleopatra: Make certificate selection dialog accessible from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Valodim added a comment to T4513: dirmngr should try the configured keyservers anyway even if they are all dead.
Gook luck on Solaris with this suggestion ;-)
• werner added a comment to T4513: dirmngr should try the configured keyservers anyway even if they are all dead.
Gook luck on Solaris with this suggestion ;-)
Valodim added a comment to T4513: dirmngr should try the configured keyservers anyway even if they are all dead.
For the record, the typical response to "it doesn't work" support requests for keys.o.o still comes down to killall dirmngr.
Fix double free in create_category
• ikloecker updated the task description for T5876: Kleopatra: Make certificate selection dialog accessible.
• ikloecker triaged T5876: Kleopatra: Make certificate selection dialog accessible as Normal priority.
• ikloecker added inline comments to rG934864d399bb: scd: Enhance PASSWD command to accept KEYGRIP optionally..
Laurent Montel <montel@kde.org> committed rLIBKLEO2127c7bed350: GIT_SILENT: prepare 22.04 beta (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 22.04 beta
• gniibe added a comment to T5862: authentication with USB token.
I write a prototype in Python using pyassuan:
scd: Use same idiom for same work.
• gniibe committed rG934864d399bb: scd: Enhance PASSWD command to accept KEYGRIP optionally. (authored by • gniibe).
scd: Enhance PASSWD command to accept KEYGRIP optionally.
Mar 9 2022
Mar 9 2022
jukivili added a comment to T5875: libgcrypt: VAES/AVX2 AES-OCB encryption performance issue with Intel CPUs, sudden drop in throughput with larger input sizes.
Fix pushed to master. Updated graph:
jukivili committed rCd820d27a3bce: rijndael-vaes-avx2: perform checksumming inline (authored by jukivili).
rijndael-vaes-avx2: perform checksumming inline
• ikloecker committed rKLEOPATRA62ec8eee5ebf: Simplify the action of the recipient key input field (authored by • ikloecker).
Simplify the action of the recipient key input field
• ikloecker committed rKLEOPATRA73e8c9b24c7c: Make "Show certificate list" action accessible (authored by • ikloecker).
Make "Show certificate list" action accessible
• ikloecker committed rKLEOPATRAfb0a38c07c5a: Filter certificate list with current text of input field (authored by • ikloecker).
Filter certificate list with current text of input field
• ikloecker committed rKLEOPATRA0f2c2caabce8: Make showing details of matching certificate/group accessible (authored by • ikloecker).
Make showing details of matching certificate/group accessible
Pimpl CertificateLineEdit
• ikloecker committed rKLEOPATRAf416737ac9f3: Set accessible name for recipient key input field (authored by • ikloecker).
Set accessible name for recipient key input field
• ikloecker committed rKLEOPATRAfe74e7e0c42d: GIT_SILENT: Remove superfluous include (authored by • ikloecker).
GIT_SILENT: Remove superfluous include
Add missing include
• werner added a comment to T5856: Forcing aead when creating sign & encrypted files creates inconsistent results.
Reagarding the OpenPGP specs: there is a new draft with LOTS of changes to already agreed upon formats and conducted interop tests. Almost everything we implemented in GnuPG and RNP has had rough consensus in the WG. Minor things like AEAD chunk size were the contested pieces. However, now they want to change everything with the possible outcome of discretization the long established trust in the stability and durability of the PGP data and key format.
lukele added a comment to T5874: gpgconf has verbose mode enabled by default.
Great, thank you very much!
Thanks for notifying. Will be fixed in the next release (mid Apri).
• werner committed rGe8b1ab1d2d22: gpgconf: Silence warnings from parsing the options files (authored by • werner).
gpgconf: Silence warnings from parsing the options files
steve awarded T5874: gpgconf has verbose mode enabled by default a Like token.
lukele updated the task description for T5874: gpgconf has verbose mode enabled by default.
• gniibe changed the status of T5856: Forcing aead when creating sign & encrypted files creates inconsistent results from Open to Testing.
sign: Construct valid AEAD packets.
• gniibe added a comment to T5856: Forcing aead when creating sign & encrypted files creates inconsistent results.
Sorry. While v5 things in the specification is still in flux, from the viewpoint of the implementation, this patch is 100% valid and it makes sense.
• gniibe added a project to T5793: gpgsm: Wrong length when parsing octetstring in constructed encoding + definite length: Restricted Project.
Fixed in master and 2.2 branch.
sm: Fix parsing encrypted data.
sm: Fix parsing encrypted data.
Mar 8 2022
Mar 8 2022
gpg: New option --require-compliance.
gpgsm: New option --require-compliance
gpgsm: New option --require-compliance
gpg: New option --require-compliance.
• werner committed rGc11292fe736d: gpg: Give Libgcrypt CFLAGS a higher priority than SQlite. (authored by • werner).
gpg: Give Libgcrypt CFLAGS a higher priority than SQlite.
jukivili committed rG15df88d135ba: iobuf: add zerocopy optimization for iobuf_read (authored by jukivili).
iobuf: add zerocopy optimization for iobuf_read
jukivili committed rG49c6e5839452: gpg: fix --enarmor with zero length source file (authored by jukivili).
gpg: fix --enarmor with zero length source file
jukivili committed rGb96eb6f08d1d: iobuf: add zerocopy optimization for iobuf_write (authored by jukivili).
iobuf: add zerocopy optimization for iobuf_write
jukivili committed rG99e2c178c73c: g10/cipher-aead: add fast path for avoid memcpy when AEAD encrypting (authored by jukivili).
g10/cipher-aead: add fast path for avoid memcpy when AEAD encrypting
jukivili committed rG583b664a07b4: g10/plaintext: disable estream buffering in binary mode (authored by jukivili).
g10/plaintext: disable estream buffering in binary mode
jukivili committed rGf2322ff942fa: Use iobuf buffer size for temporary buffer size (authored by jukivili).
Use iobuf buffer size for temporary buffer size
jukivili committed rG6c95d52a22a7: g10/decrypt-data: disable output estream buffering to reduce overhead (authored by jukivili).
g10/decrypt-data: disable output estream buffering to reduce overhead
• ikloecker committed rKLEOPATRAc588a624db26: Set key/group summary if we have a key/group on editing finished (authored by • ikloecker).
Set key/group summary if we have a key/group on editing finished
• ikloecker committed rKLEOPATRA4d3c5b420f8d: Make the model used for auto completion a single-column model (authored by • ikloecker).
Make the model used for auto completion a single-column model
• ikloecker committed rKLEOPATRA8994f1ce7dff: Ensure update of line action on text changed after editing finished (authored by • ikloecker).
Ensure update of line action on text changed after editing finished
jukivili committed rCd857e85cb4d4: ghash|polyval: add x86_64 VPCLMUL/AVX2 accelerated implementation (authored by jukivili).
ghash|polyval: add x86_64 VPCLMUL/AVX2 accelerated implementation
jukivili committed rCe6f360019369: ghash|polyval: add x86_64 VPCLMUL/AVX512 accelerated implementation (authored by jukivili).
ghash|polyval: add x86_64 VPCLMUL/AVX512 accelerated implementation
jukivili committed rC8cf06145263e: Add detection for HW feature "intel-avx512" (authored by jukivili).
Add detection for HW feature "intel-avx512"
Jakuje added a comment to T5870: libgcrypt: AEAD API for FIPS 140 (in future).
You are combining two concepts here -- the KDF and the AEAD cipher itself (at least from the FIPS terminology). I would like to avoid mixing these two together in the new API. If you would like to implement the SSH/TLS KDF, I would suggest to use the kdf API you already have. Then we are here left only with a new geniv API to implement. In the T4873 I mentioned example how it is now used in libssh using libgcrypt, which implements the iv increment outside of the libgcrypt:
• gniibe added a comment to T5856: Forcing aead when creating sign & encrypted files creates inconsistent results.
Thank you for the report.
• ikloecker committed rKLEOPATRA398cc4dbd783: Force visual focus of button with input focus when window is shown (authored by • ikloecker).
Force visual focus of button with input focus when window is shown
• werner committed rG70b738f93f1a: gpgtar,w32: Support file names longer than MAX_PATH. (authored by • werner).
gpgtar,w32: Support file names longer than MAX_PATH.
• werner committed rG6afedbcd47d9: common,w32: Support file names longer than MAX_PATH in iobuf. (authored by • werner).
common,w32: Support file names longer than MAX_PATH in iobuf.
Laurent Montel <montel@kde.org> committed rLIBKLEOb216e24c5918: Fix compile without depercated method (authored by Laurent Montel <montel@kde.org>).
Fix compile without depercated method
Laurent Montel <montel@kde.org> committed rKLEOPATRA30495ab90867: Fix compile without depercated method (authored by Laurent Montel <montel@kde.org>).
Fix compile without depercated method
• gniibe added a comment to T5793: gpgsm: Wrong length when parsing octetstring in constructed encoding + definite length.
I located the cause; Current implementation cannot parse the data like:
2611:d=5 hl=4 l=1632 cons: cont [ 0 ] 2615:d=6 hl=4 l= 500 prim: OCTET STRING 3119:d=6 hl=4 l=1124 prim: OCTET STRING
l10n daemon script <scripty@kde.org> committed rKLEOPATRA12fb062b9763: GIT_SILENT made messages (after extraction) (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT made messages (after extraction)
• gniibe updated the task description for T5793: gpgsm: Wrong length when parsing octetstring in constructed encoding + definite length.