Home GnuPG
Diffusion GnuPG c4f2d9e3e1d7

gpg: Be prepared for chosen-prefix SHA-1 collisions in key signatures.

Description

gpg: Be prepared for chosen-prefix SHA-1 collisions in key signatures.

* g10/sig-check.c (check_signature_over_key_or_uid): Reject cewrtain
SHA-1 based signatures.
  • Signed-off-by: Werner Koch <wk@gnupg.org>

Details

Provenance
wernerAuthored on Oct 3 2019, 5:43 PM
Parents
rG63dbc817e7dc: gpg: Read the UBID from the keybox and detect wrong blob type.
Branches
Unknown
Tags
Unknown