Hi, Werner Koch wrote: > I looked at the Fedora Libgcrypt source and noticed that they ship > libgcrypt with the nistp192 and all brainpool curves removed. I have > not yet build this version but given that one of your keys has brainpool > curves this might be the culprit. > > I can understand that they remove nistp192 for security policy reasons. > But I do not understand why the brainpool curves are removed. The > general statement in the spec file is that curves need to be removed due > to patent rasons. However, Brainpool curves are less prone to patent > claims for fast multiplication than the NIST curves and we actually use > the very same code for all those Weierstrass curves.
FWIW, I noticed that someone recently asked about the status of the ECC Brainpool curves on the Fedora Legal list: https://lists.fedoraproject.org/archives/list/le...@lists.fedoraproject.org/thread/WUQNAB4EPWSJMMVECL2TZGKB5KIDESII/ With luck, a fresh review by the Red Hat legal folks will result in those curves becoming accessible in the Fedora libgcrypt packages. Cheers, -- Todd _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
