Fixed in 2.2 and master. Did a couple of manual tests using 2.2 on Linux. gpgsplit comes handy to add a couple more tag-3 packets (same algos or one patched to camellia for the negative test)

Aug 2 2022, 6:55 PM · gnupg, Restricted Project

• werner committed rG171725c9717c: g13: Remove unused variable. (authored by • werner).

g13: Remove unused variable.

Aug 2 2022, 6:46 PM

• werner committed rGea7aba6e605d: gpgconf: Improve registry dumping. (authored by • werner).

gpgconf: Improve registry dumping.

Aug 2 2022, 6:46 PM

• werner committed rGe542c4af182d: gpg: Make symmetric + pubkey encryption de-vs compliant. (authored by • werner).

gpg: Make symmetric + pubkey encryption de-vs compliant.

Aug 2 2022, 6:46 PM

• werner committed rGe8011a7ceca7: gpg: Make symmetric + pubkey encryption de-vs compliant. (authored by • werner).

gpg: Make symmetric + pubkey encryption de-vs compliant.

Aug 2 2022, 6:37 PM

jukivili committed rC97e2c237f15d: tests/basic: Add ifdefs for SM4 and CAMELLIA tests (authored by neverpanic).

tests/basic: Add ifdefs for SM4 and CAMELLIA tests

Aug 2 2022, 6:04 PM

• werner added a comment to T6119: GnuPG: Compliance mode status omitted when decrypting combined symmetric and asymmetric data.

This also points out that the cipher algos and modes of the symmetric encrypted session key packets where never checked for compliance. We only checked the compliance of the bulk encryption cipher algo.

Aug 2 2022, 6:04 PM · gnupg, Restricted Project

• ikloecker changed the status of T6120: Kleopatra: Unify wording of (start and) end of validity period from Open to Testing.

Aug 2 2022, 5:44 PM · Restricted Project, kleopatra

• ikloecker committed rKLEOPATRAe47dfe74231c: Unify labeling of creation and expiration date (authored by • ikloecker).

Unify labeling of creation and expiration date

Aug 2 2022, 5:43 PM

• ikloecker committed rLIBKLEO576de59a37c1: Unify labeling of creation and expiration date (authored by • ikloecker).

Unify labeling of creation and expiration date

Aug 2 2022, 5:27 PM

• ikloecker claimed T6120: Kleopatra: Unify wording of (start and) end of validity period.

Aug 2 2022, 5:14 PM · Restricted Project, kleopatra

• ikloecker triaged T6120: Kleopatra: Unify wording of (start and) end of validity period as Normal priority.

Aug 2 2022, 5:13 PM · Restricted Project, kleopatra

• aheinecke renamed T6119: GnuPG: Compliance mode status omitted when decrypting combined symmetric and asymmetric data from GnuPG: Complaince mode status omitted when decrypting combined symmetric and asymmetric data to GnuPG: Compliance mode status omitted when decrypting combined symmetric and asymmetric data.

Aug 2 2022, 4:41 PM · gnupg, Restricted Project

• aheinecke added a comment to T6119: GnuPG: Compliance mode status omitted when decrypting combined symmetric and asymmetric data.

This was added in b03fab09e188f7bb10237d4f20455e4026737e4e

Aug 2 2022, 4:41 PM · gnupg, Restricted Project

• aheinecke added a comment to T6119: GnuPG: Compliance mode status omitted when decrypting combined symmetric and asymmetric data.

Oh, there appears to be a reason for that. In line 699 of mainproc.c:

/* Symmetric encryption and asymmetric encryption voids compliance.  */
   && (c->symkeys != !!c->pkenc_list )

Aug 2 2022, 4:37 PM · gnupg, Restricted Project

• aheinecke triaged T6119: GnuPG: Compliance mode status omitted when decrypting combined symmetric and asymmetric data as High priority.

Aug 2 2022, 4:30 PM · gnupg, Restricted Project

• ikloecker renamed T6118: Kleopatra: Bogus </item><item> in message when importing secret key with multiple user IDs from Kleopatra: Bogus </item><item> in message when exporting secret key with multiple user IDs to Kleopatra: Bogus </item><item> in message when importing secret key with multiple user IDs.

Aug 2 2022, 4:00 PM · kleopatra, Restricted Project, Bug Report

• ikloecker moved T6118: Kleopatra: Bogus </item><item> in message when importing secret key with multiple user IDs from Restricted Project Column to Restricted Project Column on the Restricted Project board.

Aug 2 2022, 3:56 PM · kleopatra, Restricted Project, Bug Report

• ikloecker changed the status of T6118: Kleopatra: Bogus </item><item> in message when importing secret key with multiple user IDs from Open to Testing.

Aug 2 2022, 3:56 PM · kleopatra, Restricted Project, Bug Report

• ikloecker committed rKLEOPATRAa6e9353ef245: Fix building of localized string with list of imported user IDs (authored by • ikloecker).

Fix building of localized string with list of imported user IDs

Aug 2 2022, 3:55 PM

• werner committed rE745d333cf7b5: w32: Convert REG_DWORD values to a string. (authored by • werner).

w32: Convert REG_DWORD values to a string.

Aug 2 2022, 3:19 PM

• ikloecker created T6118: Kleopatra: Bogus </item><item> in message when importing secret key with multiple user IDs.

Aug 2 2022, 1:57 PM · kleopatra, Restricted Project, Bug Report

mlaurent committed rLIBKLEO0a7b898e0092: Remove unused forward declaration (authored by mlaurent).

Remove unused forward declaration

Aug 2 2022, 1:22 PM

mlaurent committed rKLEOPATRA33baefc6eefe: Remove unused forward declaration (authored by mlaurent).

Remove unused forward declaration

Aug 2 2022, 1:21 PM

• werner committed rG6bc959231802: gpgconf: Improve registry dumping. (authored by • werner).

gpgconf: Improve registry dumping.

Aug 2 2022, 12:27 PM

tigernero added a comment to T6070: Yubikey 5C 'not available: card error' regression.

I have exactly this problem with yubikey here,
since i upgraded to gpg4win version 4.0.3 which contains gnupg 2.3.7 i get the same error as openpgp key not recognized.

Aug 2 2022, 12:25 PM · gnupg (gpg23), scd, Bug Report

• ikloecker changed the status of T6102: Kleopatra: Make Certifications dialog accessible from Open to Testing.

The original issues have been addressed. Moreover, the actions are now available as buttons additionally to being available as context menu items.

Aug 2 2022, 11:47 AM · kleopatra, Restricted Project

• ikloecker changed the status of T6102: Kleopatra: Make Certifications dialog accessible, a subtask of T5824: Kleopatra: Full accessibility support, from Open to Testing.

Aug 2 2022, 11:47 AM · kleopatra

• ikloecker committed rKLEOPATRA452adf99f2ee: Use actions for operations on user IDs and their certifications (authored by • ikloecker).

Use actions for operations on user IDs and their certifications

Aug 2 2022, 11:38 AM

• ikloecker committed rKLEOPATRA554349e719a0: Add buttons for invoking actions on selected user ID or certification (authored by • ikloecker).

Add buttons for invoking actions on selected user ID or certification

Aug 2 2022, 11:38 AM

• ikloecker committed rKLEOPATRA5703377393cc: Make userHasCertificationKey() helper available elsewhere (authored by • ikloecker).

Make userHasCertificationKey() helper available elsewhere

Aug 2 2022, 11:38 AM

• ikloecker committed rKLEOPATRA9dea1cbc20ac: Add helpers for checking feasibility of certification revokations (authored by • ikloecker).

Add helpers for checking feasibility of certification revokations

Aug 2 2022, 11:38 AM

• ikloecker committed rKLEOPATRA60498cdadfa8: Change selection mode to single selection (authored by • ikloecker).

Change selection mode to single selection

Aug 2 2022, 11:38 AM

OJFord added a comment to T6070: Yubikey 5C 'not available: card error' regression.

@tigernero 2.3.8 is not yet released. Pretty sure gpg4win is a separate project, presumably you'll see a changelog entry here (as there is bumping to 2.3.7 in the latest 4.0.3) when it's in:
https://www.gpg4win.org/change-history.html
https://www.gpg4win.org/support.html

Aug 2 2022, 11:01 AM · gnupg (gpg23), scd, Bug Report

• aheinecke closed T5371: Handle invalid compliance settings as Resolved.

Agreed

Aug 2 2022, 9:03 AM · Feature Request, Restricted Project, kleopatra

• gniibe committed rSf5cf61ccb127: Don't use SCD READCERT, but just use gpgsm. (authored by • gniibe).

Don't use SCD READCERT, but just use gpgsm.

Aug 2 2022, 7:17 AM

• gniibe committed rS00198cb67064: Fix wrong fix of off-by-one error. (authored by • gniibe).

Fix wrong fix of off-by-one error.

Aug 2 2022, 7:17 AM

Aug 1 2022

jukivili committed rCa8f66410ca0d: basic: gcm-siv: add fips checks for SM4 and CAMELLIA128 (authored by jukivili).

basic: gcm-siv: add fips checks for SM4 and CAMELLIA128

Aug 1 2022, 7:29 PM

• ikloecker committed rKLEOPATRA10119dd61c1d: Set accessible name for the user ID and certifications tree (authored by • ikloecker).

Set accessible name for the user ID and certifications tree

Aug 1 2022, 5:17 PM

• ikloecker committed rLIBKLEOc2fa1cf1326f: Announce empty cells of user ID rows as "User ID" (authored by • ikloecker).

Announce empty cells of user ID rows as "User ID"

Aug 1 2022, 5:17 PM

• ikloecker changed the status of T5832: Kleopatra: Make OpenPGP certificate generation (with default settings) accessible, a subtask of T5842: Gpg4win LTS 3.1.22, from Open to Testing.

Aug 1 2022, 4:53 PM · gpg4win, Restricted Project, Release Info

• ikloecker changed the status of T5832: Kleopatra: Make OpenPGP certificate generation (with default settings) accessible, a subtask of T5824: Kleopatra: Full accessibility support, from Open to Testing.

Aug 1 2022, 4:53 PM · kleopatra

• ikloecker changed the status of T5832: Kleopatra: Make OpenPGP certificate generation (with default settings) accessible from Open to Testing.

Aug 1 2022, 4:53 PM · kleopatra, Restricted Project

• ikloecker added a comment to T5832: Kleopatra: Make OpenPGP certificate generation (with default settings) accessible.

The OpenPGP-related changes mentioned in T5832#161063 have been implemented.

Aug 1 2022, 4:52 PM · kleopatra, Restricted Project

• ikloecker triaged T6117: Kleopatra: Make creation of S/MIME certificate signing request accessible as Normal priority.

Aug 1 2022, 4:51 PM · kleopatra, Restricted Project

• ikloecker added a comment to T5371: Handle invalid compliance settings.

I think this was mostly covered with T5362: Kleopatra: Add warning in compliance mode if gnupg version is not compliant and T5653: de-vs and GnuPG 2.3.3 error.

Aug 1 2022, 4:09 PM · Feature Request, Restricted Project, kleopatra

• ikloecker committed rKLEOPATRAf7c4c2d0e2bb: Show a simple success message instead of a complicated result dialog (authored by • ikloecker).

Show a simple success message instead of a complicated result dialog

Aug 1 2022, 4:03 PM

• ikloecker committed rKLEOPATRAf7dfbacd9b7f: GIT_SILENT Remove unused method (authored by • ikloecker).

GIT_SILENT Remove unused method

Aug 1 2022, 4:03 PM

• aheinecke committed rO5fd467a00d3f: Abort header parsing on invalid headers (authored by • aheinecke).

Abort header parsing on invalid headers

Aug 1 2022, 3:15 PM

• werner added projects to T5371: Handle invalid compliance settings: Restricted Project, Feature Request.

Has this been implemented?

Aug 1 2022, 3:15 PM · Feature Request, Restricted Project, kleopatra

• werner edited projects for T5990: Option to ignore the user trustlist.txt, added: Restricted Project; removed backport.

Aug 1 2022, 3:12 PM · Restricted Project, Restricted Project, gnupg (gpg22), S/MIME, gpgagent

• werner committed rG10f42f313ca7: tests: Install links for tpm2daemon (authored by • werner).

tests: Install links for tpm2daemon

Aug 1 2022, 3:11 PM

• aheinecke added a comment to T6116: Draft: Kleopatra: Card personalization workflow.

As part of this the "Change Reset Code" button should be hidden in the general user interface.

Aug 1 2022, 2:23 PM · gpd5x, kleopatra

• aheinecke triaged T6116: Draft: Kleopatra: Card personalization workflow as Wishlist priority.

Aug 1 2022, 2:20 PM · gpd5x, kleopatra

• aheinecke triaged T6115: Kleopatra: On "revoke certification" do not offer keys which did not certify that certificate as Normal priority.

Aug 1 2022, 2:12 PM · Restricted Project, kleopatra

• ikloecker committed rKLEOPATRAd672b49dbb1c: Make name of class reflect what it does (authored by • ikloecker).

Make name of class reflect what it does

Aug 1 2022, 2:09 PM

• ikloecker committed rKLEOPATRAb39f97df824f: Only offer creation of OpenPGP certificate in selection dialog (authored by • ikloecker).

Only offer creation of OpenPGP certificate in selection dialog

Aug 1 2022, 2:09 PM

• ikloecker committed rKLEOPATRA837325756ec7: Offer separate actions for creating OpenPGP key pair resp. S/MIME CSR (authored by • ikloecker).

Offer separate actions for creating OpenPGP key pair resp. S/MIME CSR

Aug 1 2022, 2:09 PM

• ikloecker committed rKLEOPATRA95416fb1d192: Create OpenPGP certificate by default with --gen-key (authored by • ikloecker).

Create OpenPGP certificate by default with --gen-key

Aug 1 2022, 2:09 PM

• werner lowered the priority of T6023: Check how GnuPG handles several keys from WKD from High to Normal.

I don't think that we need to fix things here. Important is that the WKD import uses a filter which imports only keys with the requested mail address. However, if a key with the same fingerprint already exists it will be merged.

Aug 1 2022, 11:33 AM · gnupg24, g10, common, Documentation, wkd

Jakuje reopened T6052: gnupg2 tpm2d tests do not work as "Open".

The provided change does not look like fixing the problem for me. The path to gpgconf is still wrong and I am getting the same error both with master and with the patched tarballs:

make[2]: Entering directory '/home/jjelen/devel/gnupg/tests/tpm2dtests'
LC_ALL=C EXEEXT= PATH="../gpgscm:/home/jjelen/.local/bin:/home/jjelen/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin" abs_top_srcdir="/home/jjelen/devel/gnupg" objdir="/home/jjelen/devel/gnupg" TPMSERVER="" SWTPM="/bin/swtpm" SWTPM_IOCTL="/bin/swtpm_ioctl" GNUPG_BUILD_ROOT="/home/jjelen/devel/gnupg/tests" GPGSCM_PATH="/home/jjelen/devel/gnupg/tests/gpgscm" /home/jjelen/devel/gnupg/tests/gpgscm/gpgscm \
  /home/jjelen/devel/gnupg/tests/tpm2dtests/run-tests.scm  
gpgscm: error running '/home/jjelen/devel/gnupg/tests/tools/gpgconf': probably not installed
(wait-process "/home/jjelen/devel/gnupg/tests/tools/gpgconf" 2693795 #t): Configuration error

Aug 1 2022, 11:31 AM · gnupg24 (gnupg-2.4.4), Tests, TPM, Bug Report

• werner closed T6098: Path traversal bug in gpg-wks-server as Resolved.

Aug 1 2022, 11:20 AM · wkd, gnupg

• werner triaged T6114: Support Installable test suites in gpg-crypt as Normal priority.

Aug 1 2022, 11:18 AM · Tests, dev.gnupg.org, Feature Request

rossburton created T6114: Support Installable test suites in gpg-crypt.

Aug 1 2022, 10:59 AM · Tests, dev.gnupg.org, Feature Request

• werner committed rG8e63e813c740: common: Add a default OpenPGP ECC mapping. (authored by • werner).

common: Add a default OpenPGP ECC mapping.

Aug 1 2022, 10:35 AM

• werner committed rG67e510cbf7b1: scd:opengpg: Minor vendor name fix (authored by • werner).

scd:opengpg: Minor vendor name fix

Aug 1 2022, 10:35 AM

Jul 31 2022

jukivili committed rC8287dea8379f: sm4: add ARMv8 CE accelerated implementation for XTS mode (authored by Tianjia Zhang <tianjia.zhang@linux.alibaba.com>).

sm4: add ARMv8 CE accelerated implementation for XTS mode

Jul 31 2022, 6:02 PM

jukivili committed rCa0c933f6fed0: sm4: fix unused parameter compiler warning (authored by jukivili).

sm4: fix unused parameter compiler warning

Jul 31 2022, 6:02 PM

jukivili committed rCdb5136c4d933: Simplify AES key schedule implementation (authored by jukivili).

Simplify AES key schedule implementation

Jul 31 2022, 6:02 PM

jukivili committed rC2ac6c24aa530: rijndael-ppc: small speed-up for CBC and CFB encryption (authored by jukivili).

rijndael-ppc: small speed-up for CBC and CFB encryption

Jul 31 2022, 6:02 PM

Jul 30 2022

mlaurent committed rLIBKLEO07e762ca3543: It compiles fine without deprecated methods (authored by mlaurent).

It compiles fine without deprecated methods

Jul 30 2022, 4:09 PM

mlaurent committed rKLEOPATRAaf5904e23c6d: It compiles fine without deprecated methods (authored by mlaurent).

It compiles fine without deprecated methods

Jul 30 2022, 4:05 PM

mlaurent committed rKLEOPATRA596358647787: Port deprecated methods (authored by mlaurent).

Port deprecated methods

Jul 30 2022, 4:05 PM

tigernero added a comment to T6070: Yubikey 5C 'not available: card error' regression.

I can't find a url to download gnupg 2.3.8 for windows is it possible to know when gpg4win v.4.0.4 is out which fixes this bug? because currently on windows systems I am stuck using yubikey.

Jul 30 2022, 9:53 AM · gnupg (gpg23), scd, Bug Report

Jul 29 2022

• ikloecker committed rWb068429a8fbd: Update dependencies of libkleo (authored by • ikloecker).

Update dependencies of libkleo

Jul 29 2022, 10:50 PM

• ikloecker committed rLIBKLEO2f5f44707d69: Add accessibleExpirationDate overload for signatures (authored by • ikloecker).

Add accessibleExpirationDate overload for signatures

Jul 29 2022, 4:44 PM

• ikloecker committed rLIBKLEO95ff877d7143: Provide improved representation of signature attributes for screen readers (authored by • ikloecker).

Provide improved representation of signature attributes for screen readers

Jul 29 2022, 4:35 PM

• ikloecker committed rLIBKLEOc951d24839a1: GIT_SILENT Fall through is intentional (authored by • ikloecker).

GIT_SILENT Fall through is intentional

Jul 29 2022, 4:35 PM

• ikloecker committed rLIBKLEO1ace0fc36ef3: Modernize: Use list-initialization (authored by • ikloecker).

Modernize: Use list-initialization

Jul 29 2022, 4:35 PM

• werner edited projects for T5119: TOFU messages are not completely and correctly localized to German, added: gnupg (gpg23); removed gnupg (gpg22).

It is unlikely that the tofu stuff will get into widespread use in the 2.2 version - if at all.

Jul 29 2022, 4:23 PM · gnupg24, gnupg (gpg23), i18n, Bug Report

• werner closed T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows as Resolved.

Fixed quite some time ago.

Jul 29 2022, 4:19 PM · Restricted Project, scd, Restricted Project, kleopatra

• werner moved T5990: Option to ignore the user trustlist.txt from Restricted Project Column to Restricted Project Column on the Restricted Project board.

Jul 29 2022, 4:17 PM · Restricted Project, Restricted Project, gnupg (gpg22), S/MIME, gpgagent

• aheinecke closed T4523: Gpg4win: Multiple problems reported 05-2019, a subtask of T2867: When inline response is active for crypto mail closing outlook shows the save dialog, as Invalid.

Jul 29 2022, 3:15 PM · Bug Report, gpgol

• aheinecke closed T4523: Gpg4win: Multiple problems reported 05-2019, a subtask of T4524: Kleopatra: CRL check configuration available multiple times and out of sync, as Invalid.

Jul 29 2022, 3:15 PM · Restricted Project, Bug Report, gpg4win, kleopatra

• aheinecke closed T4523: Gpg4win: Multiple problems reported 05-2019, a subtask of T4318: GpgOl: Unable to save an encrypted message to disk [gpg4win 3.1.5], as Invalid.

Jul 29 2022, 3:15 PM · gpg4win, gpgol

• aheinecke closed T4523: Gpg4win: Multiple problems reported 05-2019, a subtask of T4527: Kleopatra, GPG: Display reason if a certificate is not compliant to a compliance level, as Invalid.

Jul 29 2022, 3:15 PM · Feature Request, kleopatra

• aheinecke closed T4523: Gpg4win: Multiple problems reported 05-2019, a subtask of T4538: Support PSS signed CRLs, as Invalid.

Jul 29 2022, 3:15 PM · dirmngr, S/MIME, libksba

• aheinecke closed T4523: Gpg4win: Multiple problems reported 05-2019, a subtask of T4525: GpgOL: Error when moving opened S/MIME Mails with attachments on Exchange, as Invalid.