diff options
author | Neal H. Walfield <neal@pep.foundation> | 2018-05-14 11:36:10 +0200 |
---|---|---|
committer | Neal H. Walfield <neal@pep.foundation> | 2018-05-14 11:45:14 +0200 |
commit | 540f23dfaf379aaf540eaa50b98320428e74ffc8 (patch) | |
tree | cb182241150b84f6c74e178b42e6423ffa5055ec /openpgp/tests | |
parent | e5c7225bf327fc10610820a57c2593b36980cd04 (diff) |
openpgp: Add support for verifying binding signatures.
- Add support for verifying primary key bindings, subkey bindings,
user id bindings, and user attribute bindings.
- When canonicalizing a TPK, check all self-signatures.
- If a self-signature does not verify, check whether it is out of
order. See https://dev.gnupg.org/T2236 for the motivation.
Guilhem reports: "Of the 100 keys with lowest MSD
http://pgp.cs.uu.nl/doc/top_1000.html, 27 have badly ordered
packets."
- Drop invalid self-signatures.
- Drop user ids / user attributes / subkeys without a valid
self-siganture.
Diffstat (limited to 'openpgp/tests')
-rw-r--r-- | openpgp/tests/data/keys/dkg-sigs-out-of-order.pgp | bin | 0 -> 27552 bytes |
-rw-r--r-- | openpgp/tests/data/keys/neal-sigs-out-of-order.pgp | bin | 0 -> 8442 bytes |
2 files changed, 0 insertions, 0 deletions
diff --git a/openpgp/tests/data/keys/dkg-sigs-out-of-order.pgp b/openpgp/tests/data/keys/dkg-sigs-out-of-order.pgp Binary files differnew file mode 100644 index 00000000..0e6f4c07 --- /dev/null +++ b/openpgp/tests/data/keys/dkg-sigs-out-of-order.pgp diff --git a/openpgp/tests/data/keys/neal-sigs-out-of-order.pgp b/openpgp/tests/data/keys/neal-sigs-out-of-order.pgp Binary files differnew file mode 100644 index 00000000..5332b61b --- /dev/null +++ b/openpgp/tests/data/keys/neal-sigs-out-of-order.pgp |