summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2023-09-03WIP: Upgrade dalekwiktor/upgrade-dalekWiktor Kwapisiewicz
2023-08-29CI: remove broken benchmarks jobDevan Carpenter
broken benchmarks job is making pipelines fail. remove it as an immediate fix.
2023-08-24openpgp: Add primary key binding signature to auth subkeys.Justus Winter
- Fixes #1019.
2023-08-24ipc: Use the new crypto::ecdh::decrypt_unwrap2.Justus Winter
2023-08-24net: Use the new crypto::ecdh::decrypt_unwrap2.Justus Winter
2023-08-24openpgp: Hand the plaintext length to decrypt_unwrap, if known.Justus Winter
- When using classical ECDH with the upcoming SEIPDv2, we cannot determine the expected plaintext length by looking at the cipher octet, because that is not included in the plaintext. Instead, we know it from the header of the SEIPDv2 packet, and hand the expected length to the low-level decryption functions.
2023-08-24openpgp: Don't hardcode the AEADAlgorithm in the example.Justus Winter
2023-08-24openpgp: Implement Default for AEADAlgorithm.Justus Winter
2023-08-22openpgp: Reserve signature subpacket tag 38 ("Key Block").Justus Winter
2023-08-22openpgp: Deprecate the AEAD feature flag.Justus Winter
2023-08-22openpgp: Rename the MDC feature to SEIPDv1.Justus Winter
2023-08-21openpgp: Shortcut parse_finish for non-document signatures.Justus Winter
2023-08-11fix spelling of compressionDaniel Kahn Gillmor
2023-07-25ipc: Make starting the gpg-agent more robust.Justus Winter
- Try to create the socket directory, but don't fail if that should fail. In environments where /run/user/$UID doesn't exist, this will fail, and GnuPG will transparently fall back to putting the sockets into $GNUPGHOME.
2023-07-25ipc: Implement loopback password entry.Justus Winter
2023-07-19openpgp: Implement Key::generate_elgamal.Justus Winter
2023-07-19openpgp: Implement Key::generate_dsa.Justus Winter
2023-07-19ci: Drop Fedora 36 as it is no longer served on the mirrors.Justus Winter
- Fedora 36 reached end-of-life on 2023-05-16.
2023-07-18openpgp: Use public functions, remove pub(crate) accessors.Justus Winter
2023-07-18openpgp: Add accessors for the underlying Bitfields.Justus Winter
- Fixes #775.
2023-07-18openpgp: Add examples and documentation to Bitfield, make it public.Justus Winter
2023-07-18openpgp: Derive Default for Bitfield.Justus Winter
2023-07-18openpgp: Rework iteration over set bits.Justus Winter
2023-07-18openpgp: Rework Bitfield::padding_len.Justus Winter
2023-07-18openpgp: Avoid bit twiddling.Justus Winter
2023-07-18openpgp: Modify Bitfields in-place.Justus Winter
2023-07-18openpgp: Don't implicitly canonicalize Bitfields.Justus Winter
2023-07-18openpgp: Impl AsRef and AsMut for Bitfield.Justus Winter
2023-07-18openpgp: Rename accessors for the raw bytes.Justus Winter
2023-07-18openpgp: Make Bitfield opaque.Justus Winter
2023-07-17openpgp: Implement DSA using the RustCrypto backend.Justus Winter
2023-07-17openpgp: Fix typo.Justus Winter
2023-07-17openpgp: Add signature roundtrip test.Justus Winter
2023-07-11openpgp: Improve tracing.Justus Winter
2023-07-11openpgp: Fix checking the comment.Justus Winter
- We construct an address with format!("x ({})", comment), so we do expect to see the name set. - Fixes #747.
2023-07-09openpgp: Add Camellia support to RustCrypto backend.Shun Sakai
2023-07-07openpgp: Improve test.Justus Winter
2023-07-07openpgp: Add test vectors for the Camellia ciphers.Justus Winter
- Generated using GnuPG 2.2.40. - Fixes #1037.
2023-07-07openpgp: Simplify expression.Justus Winter
2023-07-07openpgp: Explicitly and selectively enable hashing.Justus Winter
- When we opt out of automatic hashing, it is useful to selectively opt in to hashing on a per-one-pass-signature basis. Add PacketParser::start_hashing to do this. - This is somewhat similar to PacketParser::decrypt in that they are invoked while the packet is in the packet parser, and they communicate intent to act upon that packet. - Fixes #1034.
2023-07-07openpgp: Add a way to disable automatic hashing.Justus Winter
- When encountering a one-pass-signature packet, the packet parser will, by default, start hashing later packets using the hash algorithm specified in the packet. In some cases, this is not needed, and hashing will incur a non-trivial overhead. - See #1034.
2023-07-07openpgp: Reuse computed value.Justus Winter
2023-07-07openpgp: Fix tracing, dump the right data.Justus Winter
2023-07-07openpgp: Better support early v4 certificates.Justus Winter
- If there is no key flags subpacket. Match on the key role and algorithm and synthesize one. We do this to better support very early v4 certificates, where either the binding signature is a v3 signature and cannot contain subpackets, or it is a v4 signature, but the key's capabilities were implied by the public key algorithm. - We only match on public key algorithms used at the time.
2023-07-07openpgp: Fix message structure validation.Justus Winter
- Once we finished processing the message, check that it actually conformed to the message grammar.
2023-07-07openpgp: Drop compression from encrypt bench.Wiktor Kwapisiewicz
- Compression is disabled if `--no-default-features` is being used. - This breaks some common workflows such as: `cargo bench --no-default-features --features crypto-botan2`. - Drop compression as this would unnecessarily bench performance of a third party code. - Replaces https://gitlab.com/sequoia-pgp/sequoia/-/merge_requests/1524. Reported-by: Alexander Kjäll <alexander.kjall@gmail.com>
2023-07-07CI: Install critcmp with the version of dependencies in its Cargo.lock.Wiktor Kwapisiewicz
- It avoids the issue of pulling newer dependencies that may not work with the version of Rust compiler used in the image.
2023-07-06openpgp: Fix tracing output.Justus Winter
2023-07-06openpgp: Fix hashing v3 signatures.Justus Winter
- The high-level hashing functions are implemented on SignatureFields (so that we can use them from the SignatureBuilder). Unfortunately, when those functions invoke SignatureFields::hash, the type encoding the packet version has been erased. - Recover the version at runtime and dispatch to the right hashing function.
2023-07-06openpgp: Do not try to add subpackets to v3 signatures.Justus Winter
- When we verify signatures, we sometimes add information to the signature's unhashed subpacket area. This doesn't work for v3 signatures, as those don't have subpackets.