summaryrefslogtreecommitdiffstats
path: root/openpgp/tests
diff options
context:
space:
mode:
authorNeal H. Walfield <neal@pep.foundation>2018-05-14 11:36:10 +0200
committerNeal H. Walfield <neal@pep.foundation>2018-05-14 11:45:14 +0200
commit540f23dfaf379aaf540eaa50b98320428e74ffc8 (patch)
treecb182241150b84f6c74e178b42e6423ffa5055ec /openpgp/tests
parente5c7225bf327fc10610820a57c2593b36980cd04 (diff)
openpgp: Add support for verifying binding signatures.
- Add support for verifying primary key bindings, subkey bindings, user id bindings, and user attribute bindings. - When canonicalizing a TPK, check all self-signatures. - If a self-signature does not verify, check whether it is out of order. See https://dev.gnupg.org/T2236 for the motivation. Guilhem reports: "Of the 100 keys with lowest MSD http://pgp.cs.uu.nl/doc/top_1000.html, 27 have badly ordered packets." - Drop invalid self-signatures. - Drop user ids / user attributes / subkeys without a valid self-siganture.
Diffstat (limited to 'openpgp/tests')
-rw-r--r--openpgp/tests/data/keys/dkg-sigs-out-of-order.pgpbin0 -> 27552 bytes
-rw-r--r--openpgp/tests/data/keys/neal-sigs-out-of-order.pgpbin0 -> 8442 bytes
2 files changed, 0 insertions, 0 deletions
diff --git a/openpgp/tests/data/keys/dkg-sigs-out-of-order.pgp b/openpgp/tests/data/keys/dkg-sigs-out-of-order.pgp
new file mode 100644
index 00000000..0e6f4c07
--- /dev/null
+++ b/openpgp/tests/data/keys/dkg-sigs-out-of-order.pgp
Binary files differ
diff --git a/openpgp/tests/data/keys/neal-sigs-out-of-order.pgp b/openpgp/tests/data/keys/neal-sigs-out-of-order.pgp
new file mode 100644
index 00000000..5332b61b
--- /dev/null
+++ b/openpgp/tests/data/keys/neal-sigs-out-of-order.pgp
Binary files differ