Home GnuPG
Diffusion GnuPG a73c88817ce2

gpg: Make OCB mode compliant in de-vs mode.

Description

gpg: Make OCB mode compliant in de-vs mode.

* common/compliance.c (gnupg_cipher_is_compliant): Support OCB for
gpg.
(gnupg_cipher_is_allowed): Ditto.
* g10/mainproc.c (proc_encrypted): Determine cipher mode and pass it
for the is_compliant test.

This patch also switches from just assuming CFB mode to passing the
correct mode to gnupg_cipher_is_compliant. Except for the legacy EAX
mode we only have these two modes and thus it does not really matter.
But correcting this is more future proof.

This was found while fixing

Details

Provenance
wernerAuthored on Sep 3 2025, 4:11 PM
Parents
rG607194d4714a: Post release updates
Branches
Unknown
Tags
Unknown
Tasks
T7804: de-vs compliance not shown if also password encrypted