Thank you, applied both of two patches.

Thanks, fixed.

Last week:

• libgcrypt
  • update from RedHat
  • scrypt fix
• handle report to security@gnupg.org

This week:

• libgcrypt
  • New API for KDF: T5797
    • it's caller side to control threads

Test cases are recovered in rC535a4d345872: fips: Recover test cases for selftest, add skipping in FIPS mode..

Unfortunately, gdb session log and ktrace log don't have enough information to locate the cause/problem.

Sorry, _gcry_fips_run_selftest can be run by GCRYCTL_SELFTEST.

@werner Those removed tests are selftests which are only invoked by FIPS mode for its requirement of selftests.

Pushed the change in rC76aad97dd312: fips: Reject shorter key for HMAC in FIPS mode..

And we need to fix selftest for shorter keys.

@pmgdeb : IIUC, what we need is:

diff --git a/cipher/md.c b/cipher/md.c
index 34336b5c..4f4fc9bf 100644
--- a/cipher/md.c
+++ b/cipher/md.c
@@ -903,6 +903,9 @@ prepare_macpads (gcry_md_hd_t a, const unsigned char *key, size_t keylen)
 {
   GcryDigestEntry *r;

Thank you, applied.

Last week:

• libgcrypt
  • DONE: keywrap T5752
  • FIPS things: done for me
• gnupg (2.3 and 2.2)
  • ownertrust: T5742

This week:

• gnupg-448 branch using KWP for ECDH 448
• security report

Thank you, applied.
Also, add another change.

Backported to 2.2, too.

Here is the backport to 2.2:

In the original code, register_trusted_keyid is used in keygen.c, so that it updates user_utk_list, thus, will be into utk_list.
This should be done, by adding the keyid to utk_list directly.

Things have been a bit buggy here (probably, since the beginning).
In g10/trustdb.c,

Let me clarify:

• It was on 2003-11-01 (ChangeLog is on 2003-10-31 probably in US): rG5c37fd90bf81: * trustdb.h, trustdb.c (register_trusted_keyid): New. Adds a keyid to the list…

Thank you.
Applied.

Patch applied, doc updated.
No change of FSM diagram.

I pushed the change: rC383866f014f2: cipher: Keep original behavior of Key Unwrap when not extended.

Thank you for forwarding from Debian.

Last week:

• libgcrypt keywrap: T5752
• gpg23: T5758

This week:

• libgcrypt
  • More on keywrap: T5752
  • FIPS things: T5759, T5512, etc.

Now, unwrapping supports both cases (KW and KWP).

For unwrapping, it is good if we can support "automatic" unwrapping, apply W^-1 and check the first 8 octets to see if it's KW or KWP.

The problem was the error handling.
I didn't apply the patch directly, but improved the code paths.

And I'm testing following:

The "at first" change done.

At first, I think that we need to change the way how libgcrypt rejects non-approved cipher/md/mac/pk.

Last week:

• libgcrypt
  • T5752: key wrap with padding support
• npth
  • T5748: poll/ppoll for npth
• build: autoconf macros reviewed again

This week:

• mostly inactive
• gnupg-448: consider ECDH using T5752
• gnupg23: D547

Thank you for submitting the patch.