bugDistributed Privacy Guard - Bugs: bug #57131, dkg-encrypt prefers OCB over the...


bug #57131: dkg-encrypt prefers OCB over the recipients preference for EAX

Submitted by:  Justus Winter <teythoon>
Submitted on:  Mon 28 Oct 2019 11:22:39 AM UTC  
Category:  Source Code Severity:  3 - Normal
Item Group:  Bug Status:  Fixed
Privacy:  Public Assigned to:  Heiko Stamer <stamer>
Open/Closed:  Closed

Add a New Comment (Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Fri 01 Nov 2019 10:31:57 AM UTC, comment #3: 

I didn't realize that libgcrypt doesn't do EAX yet, which is strange, because Werner made EAX a MUST implement.

I can confirm that dkg-encrypt no longer emits OCB if the recipient only states support for EAX.

Justus Winter <teythoon>
Wed 30 Oct 2019 08:31:16 PM UTC, comment #2: 

I implemented a workaround (fallback to SEIPD packet).

@teythoon Please, can you confirm that it is solved for now?

Heiko Stamer <stamer>
Project AdministratorIn charge of this item.
Wed 30 Oct 2019 07:30:33 PM UTC, comment #1: 

The problem here is that libgcrypt does not support the EAX mode yet. I guess it will be included in the next release (1.9.0), however, for now dkg-encrypt should better fail than using a non-prefered mode.

Heiko Stamer <stamer>
Project AdministratorIn charge of this item.
Mon 28 Oct 2019 11:22:39 AM UTC, original submission:  

Looking at https://tests.sequoia-pgp.org/#Encrypt-Decrypt_roundtrip_with_key__Bob___EAX you can see that dkg-encrypt uses OCB even if the recipient's key indicates that it only supports EAX.

This is a curious policy, because according to RFC4880bis-08, section 9.6.:

> Implementations MUST implement EAX.  Implementations MAY implement OCB and other algorithms.

Justus Winter <teythoon>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by teythoon (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 7 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-11-01 stamer StatusReady For Test => Fixed
        Open/ClosedOpen => Closed
    2019-10-30 stamer StatusConfirmed => Ready For Test
    2019-10-30 stamer CategoryNone => Source Code
        Item GroupNone => Bug
        StatusNone => Confirmed
        Assigned toNone => stamer

    Back to the top

    Powered by Savane 3.5