Home GnuPG
Diffusion GnuPG 534e2876acc0

gpg: Add build and runtime support for larger RSA keys
534e2876acc0Unpublished

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

Description

gpg: Add build and runtime support for larger RSA keys

* configure.ac: Added --enable-large-secmem option.
* g10/options.h: Add opt.flags.large_rsa.
* g10/gpg.c: Contingent on configure option: adjust secmem size,
add gpg --enable-large-rsa, bound to opt.flags.large_rsa.
* g10/keygen.c: Adjust max RSA size based on opt.flags.large_rsa
* doc/gpg.texi: Document --enable-large-rsa.

Some older implementations built and used RSA keys up to 16Kib, but
the larger secret keys now fail when used by more recent GnuPG, due to
secure memory limitations.

Building with ./configure --enable-large-secmem will make gpg
capable of working with those secret keys, as well as permitting the
use of a new gpg option --enable-large-rsa, which let gpg generate RSA
keys up to 8Kib when used with --batch --gen-key.

Minor edits by wk.

Details

Provenance
dkgAuthored on Oct 3 2014, 6:01 PM
wernerCommitted on Oct 3 2014, 6:27 PM
Parents
rG2889a70c1022: doc: Cleanup gpg.texi.
Branches
Unknown
Tags
Unknown

Event Timeline

Werner Koch <wk@gnupg.org> committed rG534e2876acc0: gpg: Add build and runtime support for larger RSA keys (authored by Daniel Kahn Gillmor <dkg@fifthhorseman.net>).Oct 3 2014, 6:27 PM