Page MenuHome GnuPG

gniibe (NIIBE Yutaka)
UserAdministrator

Projects (9)

User Details

User Since
Mar 27 2017, 4:47 PM (463 w, 1 d)
Roles
Administrator
Availability
Busy Busy until Jun 29 2031.

Recent Activity

Today

gniibe added a comment to T8094: libgcrypt: EC least leak failure on 32-bit machine.

No, OpenBSD's implementation of POSIX semaphore is different to NetBSD.
(It doesn't support PSHARED=1.)

Wed, Feb 11, 2:51 AM · libgcrypt, Bug Report
gniibe added a comment to T8094: libgcrypt: EC least leak failure on 32-bit machine.

Possibly, it is related to the NetBSD failure of T8065.
If importing the secret key fails (which invokes gpg-agent), decryption cannot be succeeded.
I will check OpenBSD implementation of POSIX semaphore, if it's similar to NetBSD one.

Wed, Feb 11, 2:41 AM · libgcrypt, Bug Report

Yesterday

gniibe added a comment to T8066: gpgrt: Static linking support.

Investigating GNU ld, I learned that there is no easy way (~= no way) to suppress the warnings (other than 2>/dev/null). It was implemented by the special section named gnu.warning.SYM where SYM is a symbol. I think that this is not-so-good for glibc to notify its users about possible static link problem, by gnu.warning.SYM.

Tue, Feb 10, 2:42 AM · Linux, Feature Request, gpgrt

Mon, Feb 9

gniibe created T8094: libgcrypt: EC least leak failure on 32-bit machine.
Mon, Feb 9, 9:58 AM · libgcrypt, Bug Report

Thu, Feb 5

gniibe committed rCb7ea9e3afc9f: cipher: remove unused variable idx in _gcry_pk_get_keygrip. (authored by Rudi Heitbaum <rudi@heitbaum.com>).
cipher: remove unused variable idx in _gcry_pk_get_keygrip.
Thu, Feb 5, 4:19 AM
gniibe committed rC581478c9ef9a: sexp: Fix for use of strchr wrt const qualifier. (authored by Rudi Heitbaum <rudi@heitbaum.com>).
sexp: Fix for use of strchr wrt const qualifier.
Thu, Feb 5, 4:02 AM
gniibe committed rC3961d6c2bd2a: m4: Update ltmain.sh and m4 files. (authored by gniibe).
m4: Update ltmain.sh and m4 files.
Thu, Feb 5, 2:57 AM
gniibe committed rCdd056316ce66: Fix carry overflow in Stribog in 512-bit addition (authored by lumag).
Fix carry overflow in Stribog in 512-bit addition
Thu, Feb 5, 2:57 AM

Wed, Feb 4

gniibe committed rE97c0106a9a77: spawn:w32: Fix with GPGRT_PROCESS_*_KEEP flags. (authored by gniibe).
spawn:w32: Fix with GPGRT_PROCESS_*_KEEP flags.
Wed, Feb 4, 7:26 AM
gniibe committed rEce261e592b3b: spawn:w32: Fix preparing the environment block. (authored by gniibe).
spawn:w32: Fix preparing the environment block.
Wed, Feb 4, 7:26 AM
gniibe claimed T8052: GnuPG: First listing of secret keys is empty.

I found two issues in libgpg-error for spawning functions.

Wed, Feb 4, 7:21 AM · gpgrt, Bug Report, gpgagent, gpd5x, gnupg26
gniibe added a comment to T8065: gnupg self test hang: clean migration.

POSIX documentation never says that PSHARED=0 prevents sharing among processes. In my opinion, it still conforms to POSIX even when a PSHARED=0 semaphore can be shared between parent and child processes.

Wed, Feb 4, 1:29 AM · gpgrt, NetBSD, gnupg26, Bug Report

Tue, Feb 3

gniibe committed rC949557945cf8: mpi:ec: Don't modify POINT in _gcry_mpi_ec_get_affine. (authored by gniibe).
mpi:ec: Don't modify POINT in _gcry_mpi_ec_get_affine.
Tue, Feb 3, 7:13 AM
gniibe claimed T8080: libgcrypt 1.12.0 regression: gcry_mpi_ec_curve_point.
Tue, Feb 3, 7:10 AM · libgcrypt, Bug Report
gniibe created T8080: libgcrypt 1.12.0 regression: gcry_mpi_ec_curve_point.
Tue, Feb 3, 7:09 AM · libgcrypt, Bug Report
gniibe changed the status of T8065: gnupg self test hang: clean migration from Open to Testing.
Tue, Feb 3, 6:48 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe added a project to T8065: gnupg self test hang: clean migration: gpgrt.

In tests/migrations, (unlike tests/openpgp and tests/cms), the tests do not prepare gpg-agent, but it is gpg which invokes gpg-agent if needed.
Because of that, on NetBSD (where POSIX semaphore has a different semantics), it hangs with gpg --list-secret-key, when gpg tries to spawn the gpg-agent process.
In the old code of 2.4, it simply ignore the npth_protect and npth_unprotect when calling fork to spawn a process.
New code in libgpg-error cares about npth_protect and npth_unprotect but it was not sufficient; We need to care about NetBSD's semantics. Child process should not call npth_protect. With shared semantics, child process's calling npth_protect affects to cause parent process: it hangs.

Tue, Feb 3, 6:48 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe added a comment to T8065: gnupg self test hang: clean migration.

@wiz Thank you for your quick feedback.

Tue, Feb 3, 6:33 AM · gpgrt, NetBSD, gnupg26, Bug Report
gniibe committed rE20c673e15bd7: spawn:posix: Take care of POSIX semaphore "shared" semantics. (authored by gniibe).
spawn:posix: Take care of POSIX semaphore "shared" semantics.
Tue, Feb 3, 6:31 AM
gniibe committed rE6e40339569fc: spawn:posix: Take care of POSIX semaphore "shared" semantics. (authored by gniibe).
spawn:posix: Take care of POSIX semaphore "shared" semantics.
Tue, Feb 3, 6:03 AM

Mon, Feb 2

gniibe added a comment to T8065: gnupg self test hang: clean migration.

Thank you for the log.

Mon, Feb 2, 8:14 AM · gpgrt, NetBSD, gnupg26, Bug Report

Fri, Jan 30

gniibe committed rC23345eac14d2: Register DCO for Clemens Lang. (authored by gniibe).
Register DCO for Clemens Lang.
Fri, Jan 30, 10:43 AM
gniibe committed rCffaef0be6131: jitterentropy: Include <fcntl.h> and <limits.h> (authored by heirecka).
jitterentropy: Include <fcntl.h> and <limits.h>
Fri, Jan 30, 10:43 AM
gniibe committed rC6683007d696d: kdf: Use u64. (authored by gniibe).
kdf: Use u64.
Fri, Jan 30, 10:43 AM
gniibe committed rCa60f8e43dd1b: fips: Fix memory leaks in FIPS mode (authored by Clemens Lang via Gcrypt-devel <gcrypt-devel@lists.gnupg.org>).
fips: Fix memory leaks in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rCb5b7b8c5c768: build: Fix m4/gpg-error.m4. (authored by gniibe).
build: Fix m4/gpg-error.m4.
Fri, Jan 30, 10:43 AM
gniibe committed rC2bdc6614c866: hmac: Fix memory leak (authored by Clemens Lang via Gcrypt-devel <gcrypt-devel@lists.gnupg.org>).
hmac: Fix memory leak
Fri, Jan 30, 10:43 AM
gniibe committed rC64fef2140259: Silence compiler warnings for possible alignment problem. (authored by gniibe).
Silence compiler warnings for possible alignment problem.
Fri, Jan 30, 10:43 AM
gniibe committed rC4ed49a917212: fips: Use ELF header to find hmac file offset (authored by neverpanic).
fips: Use ELF header to find hmac file offset
Fri, Jan 30, 10:43 AM
gniibe committed rCa4966208895c: fips: Fix previous commit. (authored by gniibe).
fips: Fix previous commit.
Fri, Jan 30, 10:43 AM
gniibe committed rC974f4c7e698b: fips: Integrity check improvement, with only loadable segments. (authored by gniibe).
fips: Integrity check improvement, with only loadable segments.
Fri, Jan 30, 10:43 AM
gniibe committed rCad8b67f9e219: fips: Fix gen-note-integrity.sh script not to use cmp utility. (authored by gniibe).
fips: Fix gen-note-integrity.sh script not to use cmp utility.
Fri, Jan 30, 10:43 AM
gniibe committed rCdcc6979fd2ed: fips: More portable integrity check. (authored by gniibe).
fips: More portable integrity check.
Fri, Jan 30, 10:43 AM
gniibe committed rC9fa4c8946ac5: fips: Clarify what to be hashed for the integrity check. (authored by gniibe).
fips: Clarify what to be hashed for the integrity check.
Fri, Jan 30, 10:43 AM
gniibe committed rC13b5454d2620: kdf:argon2: Fix for the case output > 64. (authored by gniibe).
kdf:argon2: Fix for the case output > 64.
Fri, Jan 30, 10:43 AM
gniibe committed rC26df4b8d8c93: cipher: Fix rsa key generation. (authored by gniibe).
cipher: Fix rsa key generation.
Fri, Jan 30, 10:43 AM
gniibe committed rC9452640125d2: random: Not use secure memory for DRBG instance. (authored by gniibe).
random: Not use secure memory for DRBG instance.
Fri, Jan 30, 10:43 AM
gniibe committed rC9c55ba3bc1ce: tests: Replace custom bit with more generic flags (authored by Jakuje).
tests: Replace custom bit with more generic flags
Fri, Jan 30, 10:43 AM
gniibe committed rCd8a13d97ccb6: Do not allow PKCS #1.5 padding for encryption in FIPS (authored by Jakuje).
Do not allow PKCS #1.5 padding for encryption in FIPS
Fri, Jan 30, 10:43 AM
gniibe committed rCf6a67c221531: cipher: Change the bounds for RSA key generation round. (authored by gniibe).
cipher: Change the bounds for RSA key generation round.
Fri, Jan 30, 10:43 AM
gniibe committed rC019a40c99011: random:drbg: Fix the behavior for child process. (authored by gniibe).
random:drbg: Fix the behavior for child process.
Fri, Jan 30, 10:43 AM
gniibe committed rC03af3d5cc5d5: mpi: Fix for 64-bit for _gcry_mpih_cmp_ui. (authored by gniibe).
mpi: Fix for 64-bit for _gcry_mpih_cmp_ui.
Fri, Jan 30, 10:43 AM
gniibe committed rC1a270cda2ee5: tests: Expect the RSA PKCS #1.5 encryption to fail in FIPS mode (authored by Jakuje).
tests: Expect the RSA PKCS #1.5 encryption to fail in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rC6d3708942f84: Fix internal declaration of _gcry_kdf_compute. (authored by gniibe).
Fix internal declaration of _gcry_kdf_compute.
Fri, Jan 30, 10:43 AM
gniibe committed rC468ffa8f9c47: cipher: Allow verification of small RSA signatures in FIPS mode (authored by Jakuje).
cipher: Allow verification of small RSA signatures in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rC4b85bf33cce7: tests: Fix copy paste error (authored by Jakuje).
tests: Fix copy paste error
Fri, Jan 30, 10:43 AM
gniibe committed rC735601494adb: Fix memory leaks in tests (authored by Jakuje).
Fix memory leaks in tests
Fri, Jan 30, 10:43 AM
gniibe committed rCbc01c770c757: random: Fix rndjent for Windows. (authored by gniibe).
random: Fix rndjent for Windows.
Fri, Jan 30, 10:43 AM
gniibe committed rCd1cb2599e9d7: mpi: Allow building with --disable-asm for HPPA. (authored by gniibe).
mpi: Allow building with --disable-asm for HPPA.
Fri, Jan 30, 10:43 AM
gniibe committed rC04960f5179cd: tests: Test gcry_pk_hash_sign w/explicit hash algo (authored by neverpanic).
tests: Test gcry_pk_hash_sign w/explicit hash algo
Fri, Jan 30, 10:43 AM
gniibe committed rC3bbcf16e0b8b: tests/t-kdf: Test KDF FIPS indicator (authored by neverpanic).
tests/t-kdf: Test KDF FIPS indicator
Fri, Jan 30, 10:43 AM
gniibe committed rCab5aef9b7b6e: hmac: Allow use of shorter salt. (authored by gniibe).
hmac: Allow use of shorter salt.
Fri, Jan 30, 10:43 AM
gniibe committed rC06c9350165d7: fips: Run digest&sign self tests for RSA and ECC in FIPS mode. (authored by Jakuje).
fips: Run digest&sign self tests for RSA and ECC in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC1d3a90a4d118: cipher: Fix gcry_pk_hash_verify for explicit hash. (authored by gniibe).
cipher: Fix gcry_pk_hash_verify for explicit hash.
Fri, Jan 30, 10:43 AM
gniibe committed rC822ee57f07ca: fips: Add function-name based FIPS indicator. (authored by Jakuje).
fips: Add function-name based FIPS indicator.
Fri, Jan 30, 10:43 AM
gniibe committed rC076a8adaf314: ecc: Run PCT also with the digest step (authored by Jakuje).
ecc: Run PCT also with the digest step
Fri, Jan 30, 10:43 AM
gniibe committed rC78151e6d6bbb: rsa: Run PCT in FIPS mode also with digest step. (authored by Jakuje).
rsa: Run PCT in FIPS mode also with digest step.
Fri, Jan 30, 10:43 AM
gniibe committed rCcf10c74bd9d5: random: Use getrandom (GRND_RANDOM) in FIPS mode. (authored by Jakuje).
random: Use getrandom (GRND_RANDOM) in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC285bf54b1ac7: Simplify the PCT for RSA and ECDSA (authored by Jakuje).
Simplify the PCT for RSA and ECDSA
Fri, Jan 30, 10:43 AM
gniibe committed rC15fb6257e827: gcrypt.h: Fix function name in comment. (authored by Jakuje).
gcrypt.h: Fix function name in comment.
Fri, Jan 30, 10:43 AM
gniibe committed rCe5bfda492ab9: fips: Disable RSA-OAEP padding in FIPS mode. (authored by Jakuje).
fips: Disable RSA-OAEP padding in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC658679e0ec8b: tests: Expect the OEAP tests to fail in FIPS mode. (authored by Jakuje).
tests: Expect the OEAP tests to fail in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC16ac1850b854: Fix _gcry_err_code_to_errno. (authored by gniibe).
Fix _gcry_err_code_to_errno.
Fri, Jan 30, 10:43 AM
gniibe committed rC44812a1d96fc: build: Fix configure script. (authored by gniibe).
build: Fix configure script.
Fri, Jan 30, 10:43 AM
gniibe committed rC4963c127ae69: fips: Skip PCT if RSA keygen test-parms specified (authored by neverpanic).
fips: Skip PCT if RSA keygen test-parms specified
Fri, Jan 30, 10:43 AM
gniibe committed rC1524b60a7ccc: build: Skip PK-specific tests if algo is disabled (authored by neverpanic).
build: Skip PK-specific tests if algo is disabled
Fri, Jan 30, 10:43 AM
gniibe committed rC9ee2d56e806b: keccak: Use size_t to avoid integer overflow (authored by Jakuje).
keccak: Use size_t to avoid integer overflow
Fri, Jan 30, 10:43 AM
gniibe committed rC52d48b710470: kdf:pkdf2: Check minimum allowed key size when running in FIPS mode. (authored by tobhe).
kdf:pkdf2: Check minimum allowed key size when running in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rCd09d3d33c79d: kdf:pkdf2: Require longer input when FIPS mode. (authored by gniibe).
kdf:pkdf2: Require longer input when FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rCce0df08bbab7: random: Get maximum 32B of entropy at once in FIPS Mode (authored by Jakuje).
random: Get maximum 32B of entropy at once in FIPS Mode
Fri, Jan 30, 10:43 AM
gniibe committed rC96615490c7b1: random: Extend the comment about FIPS specifics (authored by Jakuje).
random: Extend the comment about FIPS specifics
Fri, Jan 30, 10:43 AM
gniibe committed rCe235f38f9b9f: tests: Reproducer for short dklen in FIPS mode (authored by Jakuje).
tests: Reproducer for short dklen in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rCe2c0920fd7de: build: Update gpg-error.m4. (authored by gniibe).
build: Update gpg-error.m4.
Fri, Jan 30, 10:43 AM
gniibe committed rCe7b1fbda6a9e: hmac,hkdf: Check the HMAC key length in FIPS mode. (authored by Jakuje).
hmac,hkdf: Check the HMAC key length in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rC5191379da3ad: build: Prefer gpgrt-config when available. (authored by gniibe).
build: Prefer gpgrt-config when available.
Fri, Jan 30, 10:43 AM
gniibe committed rC7f4fafb5564d: Revert "kdf:pkdf2: Require longer input when FIPS mode." (authored by Jakuje).
Revert "kdf:pkdf2: Require longer input when FIPS mode."
Fri, Jan 30, 10:43 AM
gniibe added a reverting change for rCd09d3d33c79d: kdf:pkdf2: Require longer input when FIPS mode.: rC7f4fafb5564d: Revert "kdf:pkdf2: Require longer input when FIPS mode.".
Fri, Jan 30, 10:43 AM
gniibe committed rC44789af6c23b: doc: Update document for pkg-config and libgcrypt.m4. (authored by gniibe).
doc: Update document for pkg-config and libgcrypt.m4.
Fri, Jan 30, 10:43 AM
gniibe committed rC057844700ec2: pkdf2: Add checks for FIPS. (authored by Jakuje).
pkdf2: Add checks for FIPS.
Fri, Jan 30, 10:43 AM
gniibe committed rC20ad5df60b03: fips: Mark AES key wrapping as approved. (authored by Jakuje).
fips: Mark AES key wrapping as approved.
Fri, Jan 30, 10:43 AM
gniibe committed rCfdd2a8b3329e: rsa: Prevent usage of long salt in FIPS mode (authored by Jakuje).
rsa: Prevent usage of long salt in FIPS mode
Fri, Jan 30, 10:43 AM
gniibe committed rC392e0ccd25f3: fips,rsa: Prevent usage of X9.31 keygen in FIPS mode. (authored by Jakuje).
fips,rsa: Prevent usage of X9.31 keygen in FIPS mode.
Fri, Jan 30, 10:43 AM
gniibe committed rCbdeea2a53e9e: t-rsa-testparm: fix 'function declaration isn’t a prototype' warning (authored by jukivili).
t-rsa-testparm: fix 'function declaration isn’t a prototype' warning
Fri, Jan 30, 10:43 AM
gniibe committed rC7ddad4035d92: doc: Minor fix up. (authored by gniibe).
doc: Minor fix up.
Fri, Jan 30, 10:43 AM
gniibe committed rC83ea195b61d5: build: Fix configure.ac for strict C99. (authored by gniibe).
build: Fix configure.ac for strict C99.
Fri, Jan 30, 10:42 AM
gniibe committed rCb1a3424e7f80: build: Fix m4 macros for strict C compiler. (authored by gniibe).
build: Fix m4 macros for strict C compiler.
Fri, Jan 30, 10:42 AM
gniibe committed rC1540698389ba: fips: Remove GCM mode from the allowed FIPS indicators. (authored by Jakuje).
fips: Remove GCM mode from the allowed FIPS indicators.
Fri, Jan 30, 10:42 AM
gniibe committed rC44a3f26539f7: ecc: Do not allow skipping tests in FIPS Mode. (authored by Jakuje).
ecc: Do not allow skipping tests in FIPS Mode.
Fri, Jan 30, 10:42 AM
gniibe committed rCc41d4f502f1b: ecc: Make the PCT recoverable in FIPS mode and consistent with RSA. (authored by Jakuje).
ecc: Make the PCT recoverable in FIPS mode and consistent with RSA.
Fri, Jan 30, 10:42 AM
gniibe committed rCfc19b27b5439: visibility: Check FIPS operational status for MD+Sign operation. (authored by Jakuje).
visibility: Check FIPS operational status for MD+Sign operation.
Fri, Jan 30, 10:42 AM
gniibe committed rC397ff085749e: kdf: Update tests in regards to the allowed parameters in FIPS mode. (authored by Jakuje).
kdf: Update tests in regards to the allowed parameters in FIPS mode.
Fri, Jan 30, 10:42 AM
gniibe committed rC076dd2ffcd95: fips: Check return value from ftell (authored by Jakuje).
fips: Check return value from ftell
Fri, Jan 30, 10:42 AM
gniibe committed rC4cff7e739829: random: Remove unused SHA384 DRBGs. (authored by Jakuje).
random: Remove unused SHA384 DRBGs.
Fri, Jan 30, 10:42 AM
gniibe committed rCa51f0e66842a: fips: Add explicit indicators for md and mac algorithms. (authored by tobhe).
fips: Add explicit indicators for md and mac algorithms.
Fri, Jan 30, 10:42 AM
gniibe committed rC0024db5afee8: fips: Unblock MD5 in fips mode but mark non-approved in indicator. (authored by tobhe).
fips: Unblock MD5 in fips mode but mark non-approved in indicator.
Fri, Jan 30, 10:42 AM
gniibe committed rC6805d76b7ed4: fips: Fix fips indicator function. (authored by Jakuje).
fips: Fix fips indicator function.
Fri, Jan 30, 10:42 AM
gniibe committed rC0b2b30c0c42f: fips: Explicitly allow only some PK flags. (authored by Jakuje).
fips: Explicitly allow only some PK flags.
Fri, Jan 30, 10:42 AM
gniibe committed rCfcb9ec67a117: doc: Document the new FIPS indicators. (authored by tobhe).
doc: Document the new FIPS indicators.
Fri, Jan 30, 10:42 AM
gniibe committed rC051bbe84d889: fips: Mark gcry_pk_encrypt/decrypt function non-approved. (authored by Jakuje).
fips: Mark gcry_pk_encrypt/decrypt function non-approved.
Fri, Jan 30, 10:42 AM
gniibe committed rC251f1749900e: fips: Explicitly disable overriding random in FIPS mode. (authored by Jakuje).
fips: Explicitly disable overriding random in FIPS mode.
Fri, Jan 30, 10:42 AM