DSA GnuPG signatures

2013-01-11 Thread Vladimir 'φ-coder/phcoder' Serbinenko
Hello, all. I've just committed import of libgcrypt and implementation of related code to check signatures. Short usage: verify_detached FILE FILE.sig [pubkey.gpg] trust KEY.gpg distruct KEYID check_signatures=[enforce|no] grub-mkimage -k KEY gcry_dsa verify [...] When check_signatures=enforce ev

Re: DSA GnuPG signatures

2013-01-11 Thread Colin Watson
On Fri, Jan 11, 2013 at 09:54:22PM +0100, Vladimir 'φ-coder/phcoder' Serbinenko wrote: > 1) DSA keys only. RSA is more tricky since it needs padding and RSA > should be progressively phased out, not put into new places due to some > vulnerabilities (large classes of semiprimes are factorisable up

Re: DSA GnuPG signatures

2013-01-11 Thread Vladimir 'φ-coder/phcoder' Serbinenko
On 11.01.2013 23:14, Colin Watson wrote: > On Fri, Jan 11, 2013 at 09:54:22PM +0100, Vladimir 'φ-coder/phcoder' > Serbinenko wrote: >> 1) DSA keys only. RSA is more tricky since it needs padding and RSA >> should be progressively phased out, not put into new places due to some >> vulnerabilities