This is a milestone - please do not use. Use the standard gnupg tag and describe which versions are affected.
Details
Details
Description
Nov 19 2024
Nov 19 2024
dkg added a project to T7403: GnuPG 2.4.6 rewrites Ed25519 MPIs into non-compliant MPI form : gnupg24 (gnupg-2.4.5).
@ebo i'm not sure i understand why you removed the gnupg24 (gnupg-2.4.5) project label. the report indicates that GnuPG 2.4.6 at least (other versions untested, but i didn't see a gnupg24 (gnupg-2.4.6) label in this system) produces MPI artifacts for EdDSA/Ed25519 signatures that are non-compliant with all the known specifications. the 2.2 series appears to retain compatible MPI formats.
Nov 18 2024
Nov 18 2024
dkg added a comment to T7403: GnuPG 2.4.6 rewrites Ed25519 MPIs into non-compliant MPI form .
after a bit more testing, it looks to me like 2.2.45 will revise the signature packet to use 0x00ed as the MPI header for r, if it receives input from 2.4.6. And 2.4.6 will revise the signature packet to use 0x0100 as the MPI header for r. So the same OpenPGP self-sig will change shape each time it is passed back and forth between the different versions.
Oct 4 2024
Oct 4 2024
We won't fix that for 2.2.
• werner moved T6997: gnupg-2.4.4 breaks dirmngr fetching keys via hkps:// from behind a proxy from QA to gnupg-2.2.43 on the gnupg22 board.
Oct 1 2024
Oct 1 2024
• werner moved T7025: --trusted-key and --no-options mismatch from QA to gnupg-2.2.45 on the gnupg22 board.
Sep 25 2024
Sep 25 2024
Sep 2 2024
Sep 2 2024
• werner edited Description on gnupg24 (gnupg-2.4.5).
Mar 18 2024
Mar 18 2024
• werner moved T6997: gnupg-2.4.4 breaks dirmngr fetching keys via hkps:// from behind a proxy from WiP to QA on the gnupg22 board.
• werner moved T6811: gpgv: Read-only trustedkeys.kbx should not be compressed from WiP to QA on the gnupg22 board.
Mar 7 2024
Mar 7 2024
• werner moved T6997: gnupg-2.4.4 breaks dirmngr fetching keys via hkps:// from behind a proxy from QA to gnupg-2.4.5 on the gnupg24 board.
• werner moved T6811: gpgv: Read-only trustedkeys.kbx should not be compressed from QA to gnupg-2.4.5 on the gnupg24 board.
• werner moved T6946: gpgv: Help automatic reject too short keys from QA to gnupg-2.4.5 on the gnupg24 board.
• werner moved T6425: improve pinentry behavior and texts in smart card context from WiP to gnupg-2.4.5 on the gnupg24 board.
• werner moved T7000: Take derive usage into account for pkcs#15 cards. from WiP to gnupg-2.4.5 on the gnupg24 board.
• werner moved T7025: --trusted-key and --no-options mismatch from WiP to gnupg-2.4.5 on the gnupg24 board.
Mar 6 2024
Mar 6 2024
• werner added a project to T6963: Trust system's root CA for checking CRL issuers: gnupg24 (gnupg-2.4.5).
• werner moved T6961: On Windows the gpgtar --status-fd 2 does not show the gpg status lines from done to gnupg-2.4.5 on the gnupg24 board.