Home GnuPG
Diffusion GnuPG f952fe8c6ddf

gpg: Add build and runtime support for larger RSA keys
f952fe8c6ddfUnpublished

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

Description

gpg: Add build and runtime support for larger RSA keys

* configure.ac: Added --enable-large-secmem option.
* g10/options.h: Add opt.flags.large_rsa.
* g10/gpg.c: Contingent on configure option: adjust secmem size,
add gpg --enable-large-rsa, bound to opt.flags.large_rsa.
* g10/keygen.c: Adjust max RSA size based on opt.flags.large_rsa
* doc/gpg.texi: Document --enable-large-rsa.

This is a cherry-pick of 534e2876acc05f9f8d9b54c18511fe768d77dfb5 from
STABLE-BRANCH-1-4 against STABLE-BRANCH-2-0

Some older implementations built and used RSA keys up to 16Kib, but
the larger secret keys now fail when used by more recent GnuPG, due to
secure memory limitations.

Building with ./configure --enable-large-secmem will make gpg
capable of working with those secret keys, as well as permitting the
use of a new gpg option --enable-large-rsa, which let gpg generate RSA
keys up to 8Kib when used with --batch --gen-key.

Minor edits by wk.

Details

Provenance
dkgAuthored on Oct 3 2014, 7:59 PM
wernerCommitted on Oct 3 2014, 8:24 PM
Parents
rG39c5d991a8fe: build: Update m4 scripts
Branches
Unknown
Tags
Unknown

Event Timeline

Werner Koch <wk@gnupg.org> committed rGf952fe8c6ddf: gpg: Add build and runtime support for larger RSA keys (authored by Daniel Kahn Gillmor <dkg@fifthhorseman.net>).Oct 3 2014, 8:24 PM