curve=23 secp256r1
point=040000ffffffff0000000000000000000000000000000000000000000000000000cfe26d107a5134d6feb38ce3577075bdc7aa70ff7523d3b203c8a973f2d3dc8e
bignum=0000000000ff0000000400000000000000000000005d00003277002000010000
mbedtls: 0 04fd351b304ad50f36153d8193c4bbf7d4c3bee26e5af52a9c70133edfa62c273e05da8312615436e9c81b5b0624e68667233ace6307afc8056eae85049ca63226
gcrypt: 0 04d6915640b8ba3918f129c108f52f571ec28c1c89ad710b43928c3bd942eb29d8bf181e997b502abf12cf3606eb46379c59fd396bda7b45cdc75d429b2b37b15f

Jun 29 2021, 8:57 PM · libgcrypt, Bug Report

catenacyber added a comment to T5510: libgcrypt: incorrect computation for secp192r1.

curve=24 secp384r1
point=0400000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffffffffc1b0d6f8fb7f2de5b8875645b64042ae20f119f3e1cfefc0215857eeae5f4a8fca737057d69a42c44d958e7cfcc77ce6b
bignum=ffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52972
mbedtls: 0 0400000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffffffffce4f29070480d21a4778a9ba49bfbd51df0ee60c1e30103fdea7a81151a0b570258c8fa81965bd3bb26a7183133883194
gcrypt: 0 04fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0100000000000000fffffffbe4f29070480d21a4778a9ba49bfbd51df0ee60c1e30103fdea7a81151a0b570258c8fa81965bd3bb26a7183133883194

Jun 29 2021, 8:53 PM · libgcrypt, Bug Report

• werner committed rG5f78ae696c10: artwork: Explain the license for the logo (authored by • werner).

artwork: Explain the license for the logo

Jun 29 2021, 6:47 PM

• werner committed rD7ceaec9ecdec: web: Add a link to the logo source (authored by • werner).

web: Add a link to the logo source

Jun 29 2021, 6:40 PM

• werner committed rD6d1c162eb07c: web: Note the author of the logo (authored by • werner).

web: Note the author of the logo

Jun 29 2021, 6:32 PM

• werner triaged T5449: gnupg: Do not use SHA1 by default as Low priority.

The original idea with the DNS code was just to source copy it but it turned out that we need to maintain it in GnuPG. Thus adding support for SHA256 makes sense to keep the code current in case we ever need to use it.

Jun 29 2021, 3:49 PM · gnupg24, gnupg (gpg23), Bug Report

• werner added a project to T5513: Outlook download external content crash: gpgol.

Jun 29 2021, 3:44 PM · Too Old, gpgol, Bug Report, gpg4win

aheinecke triaged T5516: Kleopatra: File encryption output picker should have proper defaults as Normal priority.

Jun 29 2021, 1:37 PM · kleopatra

ikloecker closed T5514: Kleopatra: Use default keyserver from gpg instead of hardcoded value as Resolved.

Jun 29 2021, 12:31 PM · Restricted Project, kleopatra

ikloecker closed T5515: qgpgme: Allow retrieving the default value of a config entry as Resolved.

Jun 29 2021, 12:31 PM · gpgme, Restricted Project, kleopatra

ikloecker closed T5515: qgpgme: Allow retrieving the default value of a config entry, a subtask of T5514: Kleopatra: Use default keyserver from gpg instead of hardcoded value, as Resolved.

Jun 29 2021, 12:31 PM · Restricted Project, kleopatra

ikloecker moved T5515: qgpgme: Allow retrieving the default value of a config entry from Restricted Project Column to Restricted Project Column on the Restricted Project board.

Jun 29 2021, 12:31 PM · gpgme, Restricted Project, kleopatra

ikloecker moved T5514: Kleopatra: Use default keyserver from gpg instead of hardcoded value from Restricted Project Column to Restricted Project Column on the Restricted Project board.

Jun 29 2021, 12:31 PM · Restricted Project, kleopatra

ikloecker committed rKLEOPATRAa633f864dbe9: Set value of OpenPGP keyserver field only if config entry is set (authored by ikloecker).

Set value of OpenPGP keyserver field only if config entry is set

Jun 29 2021, 12:29 PM

ikloecker committed rKLEOPATRA1520a1da1b43: Use default value for OpenPGP keyserver provided by gpg (authored by ikloecker).

Use default value for OpenPGP keyserver provided by gpg

Jun 29 2021, 12:29 PM

ikloecker committed rM12006a782900: qt: Allow retrieving the default value of a config entry (authored by ikloecker).

qt: Allow retrieving the default value of a config entry

Jun 29 2021, 12:27 PM

ikloecker moved T5515: qgpgme: Allow retrieving the default value of a config entry from Restricted Project Column to Restricted Project Column on the Restricted Project board.

Jun 29 2021, 11:56 AM · gpgme, Restricted Project, kleopatra

ikloecker triaged T5515: qgpgme: Allow retrieving the default value of a config entry as Normal priority.

Jun 29 2021, 11:56 AM · gpgme, Restricted Project, kleopatra

ikloecker moved T5514: Kleopatra: Use default keyserver from gpg instead of hardcoded value from Restricted Project Column to Restricted Project Column on the Restricted Project board.

Jun 29 2021, 11:52 AM · Restricted Project, kleopatra

ikloecker claimed T5514: Kleopatra: Use default keyserver from gpg instead of hardcoded value.

Jun 29 2021, 11:52 AM · Restricted Project, kleopatra

ikloecker created T5514: Kleopatra: Use default keyserver from gpg instead of hardcoded value.

Jun 29 2021, 11:52 AM · Restricted Project, kleopatra

onickolay added a comment to T5464: Failure to import Curve25519 ECDH secret subkey to the GnupG..

Do I correctly understand that issue will be resolved on GnuPG side by tweaking key bits before private-key import/and/or/operations?

Jun 29 2021, 11:19 AM · Support, gnupg, OpenPGP

Jun 28 2021

jukivili added a comment to T5510: libgcrypt: incorrect computation for secp192r1.

P192, P224, P256 and P384 are affected.

Jun 28 2021, 10:03 PM · libgcrypt, Bug Report

ukjoe created T5513: Outlook download external content crash.

Jun 28 2021, 9:39 PM · Too Old, gpgol, Bug Report, gpg4win

catenacyber added a comment to T5510: libgcrypt: incorrect computation for secp192r1.

Is secp192r1 only curve that is giving wrong results?

Jun 28 2021, 8:40 PM · libgcrypt, Bug Report

jukivili added a comment to T5510: libgcrypt: incorrect computation for secp192r1.

Attached patch should fix the issue:

0001-ec-nist-fix-output-masking-for-P192-P224-P256-and-P3.patch6 KBDownload

Jun 28 2021, 8:03 PM · libgcrypt, Bug Report

Laurent Montel <montel@kde.org> committed rLIBKLEOc48c89cca718: GIT_SILENT: add license (authored by Laurent Montel <montel@kde.org>).

GIT_SILENT: add license

Jun 28 2021, 7:30 PM

Laurent Montel <montel@kde.org> committed rKLEOPATRAb5be23850e85: GIT_SILENT: add license (authored by Laurent Montel <montel@kde.org>).

GIT_SILENT: add license

Jun 28 2021, 7:28 PM

ikloecker moved T4717: Kleopatra: Changing expiry does not change expiry for subkeys from Restricted Project Column to Restricted Project Column on the Restricted Project board.

Jun 28 2021, 5:56 PM · Restricted Project, kleopatra, gpg4win

ikloecker changed the status of T4717: Kleopatra: Changing expiry does not change expiry for subkeys from Open to Testing.

Fixed as discussed.

Jun 28 2021, 5:55 PM · Restricted Project, kleopatra, gpg4win

ikloecker committed rKLEOPATRA1c77c096c334: GIT_SILENT Fix filename in copyright header (authored by ikloecker).

GIT_SILENT Fix filename in copyright header

Jun 28 2021, 5:46 PM

ikloecker committed rKLEOPATRA390aa44e3703: Avoid binding to a temporary (authored by ikloecker).

Avoid binding to a temporary

Jun 28 2021, 5:46 PM

ikloecker committed rKLEOPATRA6f9a481be003: Optionally, also update subkeys when changing expiration of key (authored by ikloecker).

Optionally, also update subkeys when changing expiration of key

Jun 28 2021, 5:46 PM

ikloecker committed rKLEOPATRA1b7a1df50993: Remove separate expirydialog.ui (authored by ikloecker).

Remove separate expirydialog.ui

Jun 28 2021, 5:46 PM

ikloecker committed rKLEOPATRA47ab3744a366: Modernize code (authored by ikloecker).

Modernize code

Jun 28 2021, 5:46 PM

jukivili added a comment to T5510: libgcrypt: incorrect computation for secp192r1.

Thanks for reporting. There is two commits in that commit range, including https://dev.gnupg.org/rC9d909cb67e70fd792926ac1e2ab305b2cc96bc27 which adds fast reduction for NIST curves. So obviously something is wrong there. Is secp192r1 only curve that is giving wrong results?

Jun 28 2021, 5:34 PM · libgcrypt, Bug Report

• werner triaged T5512: Implement service indicators as High priority.

Jun 28 2021, 1:27 PM · Feature Request, FIPS, libgcrypt

Jakuje created T5512: Implement service indicators.

Jun 28 2021, 12:28 PM · Feature Request, FIPS, libgcrypt

ikloecker committed rMd8638ed0aa5b: Update NEWS. (authored by ikloecker).

Update NEWS.

Jun 28 2021, 12:13 PM

ikloecker committed rM9d2b876093c2: qt: Fix filenames in copyright headers (authored by ikloecker).

qt: Fix filenames in copyright headers

Jun 28 2021, 12:01 PM

ikloecker committed rMade95b25ce47: qt: Remove superfluous trailing ';' (authored by ikloecker).

qt: Remove superfluous trailing ';'

Jun 28 2021, 12:01 PM

ikloecker committed rM144d580607dd: qt: Allow changing expiration date of primary key and all subkeys (authored by ikloecker).

qt: Allow changing expiration date of primary key and all subkeys

Jun 28 2021, 12:01 PM

ikloecker committed rM3503816570a1: qt: Add mechanism for missing d-pointer in Job (authored by ikloecker).

qt: Add mechanism for missing d-pointer in Job

Jun 28 2021, 12:01 PM

ikloecker committed rM801acd89b234: qt: Add test for ChangeExpiryJob (authored by ikloecker).

qt: Add test for ChangeExpiryJob

Jun 28 2021, 12:01 PM

aheinecke added a project to T5511: Kleopatra: Show "is this your own key" question for Smartcards somehow, too: kleopatra.

Jun 28 2021, 11:51 AM · kleopatra, Restricted Project

aheinecke triaged T5511: Kleopatra: Show "is this your own key" question for Smartcards somehow, too as Normal priority.

Jun 28 2021, 11:35 AM · kleopatra, Restricted Project

aheinecke added a project to T5475: Kleopatra: Crash when decrypting large archives: kleopatra.

Jun 28 2021, 11:21 AM · kleopatra

aheinecke reopened T5475: Kleopatra: Crash when decrypting large archives as "Open".

I have received a convincing report that Kleopatra crashes when encrypting or decrypting Folder structures > 30GB. So I need to at least test this, too.

Jun 28 2021, 11:21 AM · kleopatra

• werner changed the Can Browse User Directory policy for application People from All Users to Contributor (Project).

Jun 28 2021, 7:46 AM

• werner changed the Default Edit Policy policy for application Owners from All Users to Contributor (Project).

Jun 28 2021, 7:45 AM

• werner changed the Can Manage Macros policy for application Macro from All Users to Contributor (Project).

Jun 28 2021, 7:45 AM

• werner changed the Default Edit Policy policy for application Pholio from All Users to Contributor (Project).

Jun 28 2021, 7:42 AM

• werner changed the Default Edit Policy policy for application Projects from All Users to Administrators.

Jun 28 2021, 7:40 AM

Sanmilie added a revision to T5484: SCDaemon Not reselect applet and reauthenticate when the card send Security Not Sastisfied: D535: More general for large scale multi-apps card in pcsc-shared context. .

Jun 28 2021, 6:18 AM · yubikey, Bug Report, scd

Sanmilie added a task to D535: More general for large scale multi-apps card in pcsc-shared context. : T5484: SCDaemon Not reselect applet and reauthenticate when the card send Security Not Sastisfied.

Jun 28 2021, 6:18 AM · scd

Sanmilie requested review of D535: More general for large scale multi-apps card in pcsc-shared context. .

Jun 28 2021, 6:17 AM · scd

kloczek added a comment to T4416: gnupg isn't LTO ready.

test-stubs.c:374:1: note: 'show_photos' was previously declared here
keyserver-internal.h:35:24: warning: type of 'parse_keyserver_uri' does not match original declaration [-Wlto-type-mismatch]
   35 | struct keyserver_spec *parse_keyserver_uri (const char *string,
      |                        ^
test-stubs.c:356:1: note: type mismatch in parameter 3
  356 | parse_keyserver_uri (const char *uri, int require_scheme,
      | ^
test-stubs.c:356:1: note: 'parse_keyserver_uri' was previously declared here
keyserver-internal.h:60:5: warning: type of 'keyserver_import_ldap' does not match original declaration [-Wlto-type-mismatch]
   60 | int keyserver_import_ldap (ctrl_t ctrl, const char *name,
      |     ^
test-stubs.c:243:1: note: type mismatch in parameter 2
  243 | keyserver_import_ldap (const char *name)
      | ^
test-stubs.c:243:1: note: 'keyserver_import_ldap' was previously declared here
keyserver-internal.h:57:5: warning: type of 'keyserver_import_name' does not match original declaration [-Wlto-type-mismatch]
   57 | int keyserver_import_name (ctrl_t ctrl,
      |     ^
test-stubs.c:224:1: note: type mismatch in parameter 3
  224 | keyserver_import_name (const char *name,struct keyserver_spec *spec)
      | ^
test-stubs.c:224:1: note: 'keyserver_import_name' was previously declared here
keyserver-internal.h:50:5: warning: type of 'keyserver_import_cert' does not match original declaration [-Wlto-type-mismatch]
   50 | int keyserver_import_cert (ctrl_t ctrl, const char *name, int dane_mode,
      |     ^
test-stubs.c:205:1: note: type mismatch in parameter 2
  205 | keyserver_import_cert (const char *name)
      | ^
test-stubs.c:205:1: note: 'keyserver_import_cert' was previously declared here
keyserver-internal.h:44:5: warning: type of 'keyserver_import_keyid' does not match original declaration [-Wlto-type-mismatch]
   44 | int keyserver_import_keyid (ctrl_t ctrl, u32 *keyid,
      |     ^
test-stubs.c:184:1: note: type mismatch in parameter 3
  184 | keyserver_import_keyid (u32 *keyid, void *dummy, unsigned int flags)
      | ^
test-stubs.c:184:1: note: 'keyserver_import_keyid' was previously declared here
photoid.h:31:6: warning: type of 'show_photos' does not match original declaration [-Wlto-type-mismatch]
   31 | void show_photos (ctrl_t ctrl, const struct user_attribute *attrs, int count,
      |      ^
test-stubs.c:374:1: note: type mismatch in parameter 2
  374 | show_photos (const struct user_attribute *attrs, int count, PKT_public_key *pk)
      | ^
test-stubs.c:374:1: note: 'show_photos' was previously declared here
keyserver-internal.h:35:24: warning: type of 'parse_keyserver_uri' does not match original declaration [-Wlto-type-mismatch]
   35 | struct keyserver_spec *parse_keyserver_uri (const char *string,
      |                        ^
test-stubs.c:356:1: note: type mismatch in parameter 3
  356 | parse_keyserver_uri (const char *uri, int require_scheme,
      | ^
test-stubs.c:356:1: note: 'parse_keyserver_uri' was previously declared here
keyserver-internal.h:60:5: warning: type of 'keyserver_import_ldap' does not match original declaration [-Wlto-type-mismatch]
   60 | int keyserver_import_ldap (ctrl_t ctrl, const char *name,
      |     ^
test-stubs.c:243:1: note: type mismatch in parameter 2
  243 | keyserver_import_ldap (const char *name)
      | ^
test-stubs.c:243:1: note: 'keyserver_import_ldap' was previously declared here
keyserver-internal.h:57:5: warning: type of 'keyserver_import_name' does not match original declaration [-Wlto-type-mismatch]
   57 | int keyserver_import_name (ctrl_t ctrl,
      |     ^
test-stubs.c:224:1: note: type mismatch in parameter 3
  224 | keyserver_import_name (const char *name,struct keyserver_spec *spec)
      | ^
test-stubs.c:224:1: note: 'keyserver_import_name' was previously declared here
keyserver-internal.h:50:5: warning: type of 'keyserver_import_cert' does not match original declaration [-Wlto-type-mismatch]
   50 | int keyserver_import_cert (ctrl_t ctrl, const char *name, int dane_mode,
      |     ^
test-stubs.c:205:1: note: type mismatch in parameter 2
  205 | keyserver_import_cert (const char *name)
      | ^
test-stubs.c:205:1: note: 'keyserver_import_cert' was previously declared here
keyserver-internal.h:44:5: warning: type of 'keyserver_import_keyid' does not match original declaration [-Wlto-type-mismatch]
   44 | int keyserver_import_keyid (ctrl_t ctrl, u32 *keyid,
      |     ^
test-stubs.c:184:1: note: type mismatch in parameter 3
  184 | keyserver_import_keyid (u32 *keyid, void *dummy, unsigned int flags)
      | ^
test-stubs.c:184:1: note: 'keyserver_import_keyid' was previously declared here
photoid.h:31:6: warning: type of 'show_photos' does not match original declaration [-Wlto-type-mismatch]
   31 | void show_photos (ctrl_t ctrl, const struct user_attribute *attrs, int count,
      |      ^
test-stubs.c:374:1: note: type mismatch in parameter 2
  374 | show_photos (const struct user_attribute *attrs, int count, PKT_public_key *pk)
      | ^
test-stubs.c:374:1: note: 'show_photos' was previously declared here
keyserver-internal.h:35:24: warning: type of 'parse_keyserver_uri' does not match original declaration [-Wlto-type-mismatch]
   35 | struct keyserver_spec *parse_keyserver_uri (const char *string,
      |                        ^
test-stubs.c:356:1: note: type mismatch in parameter 3
  356 | parse_keyserver_uri (const char *uri, int require_scheme,
      | ^
test-stubs.c:356:1: note: 'parse_keyserver_uri' was previously declared here
keyserver-internal.h:60:5: warning: type of 'keyserver_import_ldap' does not match original declaration [-Wlto-type-mismatch]
   60 | int keyserver_import_ldap (ctrl_t ctrl, const char *name,
      |     ^
test-stubs.c:243:1: note: type mismatch in parameter 2
  243 | keyserver_import_ldap (const char *name)
      | ^
test-stubs.c:243:1: note: 'keyserver_import_ldap' was previously declared here
keyserver-internal.h:57:5: warning: type of 'keyserver_import_name' does not match original declaration [-Wlto-type-mismatch]
   57 | int keyserver_import_name (ctrl_t ctrl,
      |     ^
test-stubs.c:224:1: note: type mismatch in parameter 3
  224 | keyserver_import_name (const char *name,struct keyserver_spec *spec)
      | ^
test-stubs.c:224:1: note: 'keyserver_import_name' was previously declared here
keyserver-internal.h:50:5: warning: type of 'keyserver_import_cert' does not match original declaration [-Wlto-type-mismatch]
   50 | int keyserver_import_cert (ctrl_t ctrl, const char *name, int dane_mode,
      |     ^
test-stubs.c:205:1: note: type mismatch in parameter 2
  205 | keyserver_import_cert (const char *name)
      | ^
test-stubs.c:205:1: note: 'keyserver_import_cert' was previously declared here
keyserver-internal.h:44:5: warning: type of 'keyserver_import_keyid' does not match original declaration [-Wlto-type-mismatch]
   44 | int keyserver_import_keyid (ctrl_t ctrl, u32 *keyid,
      |     ^
test-stubs.c:184:1: note: type mismatch in parameter 3
  184 | keyserver_import_keyid (u32 *keyid, void *dummy, unsigned int flags)
      | ^
test-stubs.c:184:1: note: 'keyserver_import_keyid' was previously declared here
photoid.h:31:6: warning: type of 'show_photos' does not match original declaration [-Wlto-type-mismatch]
   31 | void show_photos (ctrl_t ctrl, const struct user_attribute *attrs, int count,
      |      ^
gpgv.c:617:1: note: type mismatch in parameter 2
  617 | show_photos (const struct user_attribute *attrs, int count, PKT_public_key *pk)
      | ^
gpgv.c:617:1: note: 'show_photos' was previously declared here
keyserver-internal.h:35:24: warning: type of 'parse_keyserver_uri' does not match original declaration [-Wlto-type-mismatch]
   35 | struct keyserver_spec *parse_keyserver_uri (const char *string,
      |                        ^
gpgv.c:599:1: note: type mismatch in parameter 3
  599 | parse_keyserver_uri (const char *uri, int require_scheme,
      | ^
gpgv.c:599:1: note: 'parse_keyserver_uri' was previously declared here
keyserver-internal.h:60:5: warning: type of 'keyserver_import_ldap' does not match original declaration [-Wlto-type-mismatch]
   60 | int keyserver_import_ldap (ctrl_t ctrl, const char *name,
      |     ^
gpgv.c:485:1: note: type mismatch in parameter 2
  485 | keyserver_import_ldap (const char *name)
      | ^
gpgv.c:485:1: note: 'keyserver_import_ldap' was previously declared here
keyserver-internal.h:57:5: warning: type of 'keyserver_import_name' does not match original declaration [-Wlto-type-mismatch]
   57 | int keyserver_import_name (ctrl_t ctrl,
      |     ^
gpgv.c:466:1: note: type mismatch in parameter 3
  466 | keyserver_import_name (const char *name,struct keyserver_spec *spec)
      | ^
gpgv.c:466:1: note: 'keyserver_import_name' was previously declared here
keyserver-internal.h:50:5: warning: type of 'keyserver_import_cert' does not match original declaration [-Wlto-type-mismatch]
   50 | int keyserver_import_cert (ctrl_t ctrl, const char *name, int dane_mode,
      |     ^
gpgv.c:447:1: note: type mismatch in parameter 2
  447 | keyserver_import_cert (const char *name)
      | ^
gpgv.c:447:1: note: 'keyserver_import_cert' was previously declared here
keyserver-internal.h:44:5: warning: type of 'keyserver_import_keyid' does not match original declaration [-Wlto-type-mismatch]
   44 | int keyserver_import_keyid (ctrl_t ctrl, u32 *keyid,
      |     ^
gpgv.c:426:1: note: type mismatch in parameter 3
  426 | keyserver_import_keyid (u32 *keyid, void *dummy, unsigned int flags)
      | ^
gpgv.c:426:1: note: 'keyserver_import_keyid' was previously declared here
certchain.c:2123:1: note: in a call to function 'gpgsm_validate_chain'
 2123 | gpgsm_validate_chain (ctrl_t ctrl, ksba_cert_t cert, ksba_isotime_t checktime,
      | ^
cvt-openpgp.h:27:13: warning: type of 'convert_from_openpgp_native' does not match original declaration [-Wlto-type-mismatch]
   27 | gpg_error_t convert_from_openpgp_native (ctrl_t ctrl,
      |             ^
t-protect.c:344:1: note: type mismatch in parameter 4
  344 | convert_from_openpgp_native (gcry_sexp_t s_pgp, const char *passphrase,
      | ^
t-protect.c:344:1: note: 'convert_from_openpgp_native' was previously declared here

Jun 28 2021, 2:00 AM

kloczek added a comment to T4416: gnupg isn't LTO ready.

In this case it is not about don't consult the return code or casting sometning byt messy declaration in header files and .c files.
Please have look closer one more time on [-Wlto-type-mismatch] warnings.

Jun 28 2021, 1:55 AM