bugDistributed Privacy Guard - Bugs: bug #56877, dkg-decrypt should be able to...

 
 

bug #56877: dkg-decrypt should be able to verify intended recipients even when only using a session key

Submitter:  Daniel Kahn Gillmor <dkg>
Submitted:  Mon 09 Sep 2019 03:32:34 PM UTC
   
 
Category:  Source Code Severity:  2 - Minor
Priority:  5 - Normal Item Group:  Feature Request
Status:  In Progress Privacy:  Public
Assigned to:  stamer Open/Closed:  Open
* Mandatory Fields

Post a Comment

Add a New Comment Rich Markup
   

Discussion

Mon 09 Sep 2019 07:27:52 PM UTC, comment #1: 

There is already an option ("-K, --weak") that allow keys with weak cryptographic parameters for verification of included signatures. It could be reused here.

If no Intended Recipients are defined by a corresponding signature subpacket then no check is done at all.

Heiko Stamer <stamer>
Group administrator
Mon 09 Sep 2019 03:32:34 PM UTC, original submission:  

over in https://gitlab.co ... 19#note_213879442 Heiko and i were discussing how to deal with intended_recipients subpackets when decrypting with only a session key.

one option is to "weaken" the strictness, but i think maybe we need to state what the strictness actually is intended to do in this case.

For example, how strict is the tooling if the decryption is done by a secret key whose corresponding OpenPGP certificate is expired or revoked?  what sort of time bounds are checked?  what happens if no intended_recipients subpacket is present at all?

Daniel Kahn Gillmor <dkg>

 

Attached Files

This item currently has no attached files.

(Note: upload size limit is set to 4.0MiB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

 

Dependencies

This item does not depend on any other items.

No items depend on this one.

 

Mail Notification Carbon-Copy List

Carbon-Copy List
  • -email is unavailable- added by dkg (Submitted the item)
  •  

    Votes

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    History

    Follow 5 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-10-23 stamer Severity3 - Normal 2 - Minor
    2019-10-23 stamer CategoryNone Source Code
        Item GroupNone Feature Request
    2019-09-09 stamer StatusNone In Progress
        Assigned toNone stamer

    Back to the top

    Powered by Savane 3.16-1b88.
    Corresponding source code