PGP / gpg スレ

PGP / gpg スレ (535ﾚｽ)
上下前次 1-新
通常表示 512ﾊﾞｲﾄ分割ﾚｽ栞

506: 名無しさん＠お腹いっぱい。 [sage] 2024/03/13(水) 07:43:13.49

GnuPG 2.4.5

Noteworthy changes in version 2.4.5
===================================

* gpg,gpgv: New option --assert-pubkey-algo.  [T6946]
* gpg: Emit status lines for errors in the compression layer.   [T6977]
* gpg: Fix invocation with --trusted-keys and --no-options.  [T7025]
* gpgsm: Allow for a longer salt in PKCS#12 files.  [T6757]
* gpgtar: Make --status-fd=2 work on Windows.  [T6961]
* scd: Support for the ACR-122U NFC reader.  [rG1682ca9f01]
* scd: Suport D-TRUST ECC cards.  [T7000,T7001]
* scd: Allow auto detaching of kernel drivers; can be disabled with the new compatibility-flag ccid-no-auto-detach.  [rGa1ea3b13e0]
* scd: Allow setting a PIN length of 6 also with a reset code for openpgp cards.  [T6843]
* agent: Allow GET_PASSPHRASE in restricted mode.  [rGadf4db6e20]
* dirmngr: Trust system's root CAs for checking CRL issuers.   [T6963]
* dirmngr: Fix regression in 2.4.4 in fetching keys via hkps.   [T6997]
* gpg-wks-client: Make option --mirror work properly w/o specifying domains.  [rG37cc255e49]
* g13,gpg-wks-client: Allow command style options as in "g13 mount foo".  [rGa09157ccb2]
* Allow tilde expansion for the foo-program options.  [T7017]
* Make the getswdb.sh tool usable outside the GnuPG tree.

Release-info: https://dev.gnupg.org/T6960

http://mevius.5ch.net/test/read.cgi/unix/1007324740/506

513: 名無しさん＠お腹いっぱい。 [sage] 2024/09/13(金) 12:53:07.14

Changes which will also show up in the firthcoming 2.4.6:

* gpg: New command --quick-set-ownertrust.  [rG967678d972]
* gpg: Indicate disabled keys in key listings and add list option "show-ownertrust".  [rG2a0a706eb2]
* gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.  [T7042]
* gpg: Do not allow to accidently set the RENC usage.  [T7072]
* gpg: Accept armored files without CRC24 checksum.  [T7071]
* gpg: New --import-option "only-pubkeys".  [T7146]
* gpg: Repurpose the AKL mechanism "ldap" to work like the keyserver mechnism but only for LDAP keyservers.  [rG068ebb6f1e]
* gpg: ADSKs are now configurable for new keys.  [T6882]
* gpgsm: Emit user IDs with an empty Subject also in colon mode.  [T7171]
* agent: Consider an empty pattern file as valid.  [rGc27534de95]
* agent: Fix error handling of READKEY.  [T6012]
* agent: Avoid random errors when storing key in ephemeral mode.  [T7129, rGfdc5003956]
* agent: Make "SCD DEVINFO --watch" more robust.  [T7151]
* scd: Improve KDF data object handling for OpenPGP cards.  [T7058]
* scd: Avoid buffer overrun with more than 16 PC/SC readers.  [T7129, rG4c1b007035]
* scd: Fix how the scdaemon on its pipe connection finishes.  [T7160]
* gpgconf: Check readability of some files with -X and change its output format.  [rG98e287ba6d]
* gpg-mail-tube: New tool to apply PGP/MIME encryption to a mail.  [rG28a080bc9f]
* Fix some uninitialized variables and double frees in error code paths.  [T7129]

Release-info: https://dev.gnupg.org/T7189

http://mevius.5ch.net/test/read.cgi/unix/1007324740/513

514: 名無しさん＠お腹いっぱい。 [sage] 2024/09/13(金) 12:54:16.43

GnuPG 2.5.1 (2.6系に向けた公開テスト版)

Noteworthy changes in version 2.5.1 (2024-09-12)
================================================
[compared to version 2.5.0]
* gpg: The support for composite Kyber+ECC public key algorithms does now use the final FIPS-203 and LibrePGP specifications.  The experimental keys from 2.5.0 are no longer supported.  [T6815]
* gpg: New commands --add-recipients and --change-recipients.  [T1825]
* gpg: New option --proc-all-sigs.  [T7261]
* gpg: Fix a regression in 2.5.0 in gpgme's tests.  [T7195]
* gpg: Make --no-literal work again for -c and --store.  [T5852]
* gpg: Improve detection of input data read errors.  [T6528]
* gpg: Fix getting key by IPGP record (rfc-4398).  [T7288]
* gpgsm: New option --assert-signer.  [T7286]
* gpgsm: More improvements to PKCS#12 parsing to cope with latest IVBB changes.  [T7213]
* agent: Fix KEYTOCARD command when used with a loopback pinentry.  [T7283]
* gpg-mail-tube: Make sure GNUPGHOME is set in vsd mode.  New option --as-attach.  [rG4511997e9e1b]
* Now uses the process spawn API from libgpg-error.  [T7192,T7194]
* Removed the --enable-gpg-is-gpg2 configure time option.  [rG2125f228d36c]
* Die Windows version will now be build for 64-Bit Windows and with the corresponding changes to the installation directory and Registry keys.

Release-info: https://dev.gnupg.org/T7191

http://mevius.5ch.net/test/read.cgi/unix/1007324740/514

515: 名無しさん＠お腹いっぱい。 [sage] 2024/10/30(水) 08:33:32.03

GnuPG 2.4.6

Noteworthy changes in version 2.4.6
===================================
* gpg: New command --quick-set-ownertrust.  [rG967678d972]
* gpg: Indicate disabled keys in key listings and add list option "show-ownertrust".  [rG2a0a706eb2]
* gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.  [T7042]
* gpg: Do not allow to accidently set the RENC usage.  [T7072]
* gpg: Accept armored files without CRC24 checksum.  [T7071]
* gpg: New --import-option "only-pubkeys".  [T7146]
* gpg: Repurpose the AKL mechanism "ldap" to work like the keyserver mechnism but only for LDAP keyservers.  [rG6551281ca3]
* gpg: ADSKs are now configurable for new keys.  [T6882]
* gpg: New option --proc-all-sigs.  [T7261]
* gpg: Fix a wrong decryption failed status for signed and OCB encrypted messages without a signature verification key.  [T7042]
* gpg: Make --no-literal work again for -c and --store.  [T5852]
* gpg: Fix getting key by IPGP.  [T7288]
* gpg: Validate the trustdb after the import of a trusted key.  [T7200]
* gpg: Exclude expired trusted keys from the key validation process.  [T7200]
* gpgsm: New option --assert-signer.  [T7286]
* gpgsm: Emit user IDs with an empty Subject also in colon mode.  [T7171]
* keyboxd: Fix a race condition on the database handle.  [T7294]
* agent: Consider an empty pattern file as valid.  [rGc27534de95]
* agent: Fix error handling of READKEY.  [T6012]
* agent: Avoid random errors when storing key in ephemeral mode.  [T7129, rG19d93a239d]
* agent: Make "SCD DEVINFO --watch" more robust.  [T7151]
* agent: Fix detection of the yet unused trustflag de-vs.  [T5079]
* scd: Improve KDF data object handling for OpenPGP cards.  [T7058]
* scd: Avoid buffer overrun with more than 16 PC/SC readers.  [T7129, rG524e3a9345]
* scd: Fix how the scdaemon on its pipe connection finishes.  [T7160]
* gpgconf: Check readability of some files with -X and change its output format.  [rG759adb2493]
* gpg-mail-tube: New tool to apply PGP/MIME encryption to a mail.  [rGa564a9f66c]
* Fix a race condition in creating the socket directory.  [T7332]
* Fix some uninitialized variables and double frees in error code paths.  [T7129]

Release-info: https://dev.gnupg.org/T7030

http://mevius.5ch.net/test/read.cgi/unix/1007324740/515

519: 名無しさん＠お腹いっぱい。 [sage] 2024/12/06(金) 20:53:23.61

GnuPG 2.5.2（テスト版）

Noteworthy changes in version 2.5.2 (2024-12-05)
================================================
[compared to version 2.5.1]

* gpg: Add option 16 to --full-gen-key to create ECC+Kyber.  [T6638]
* gpg: For composite algos add the algo string to the colons listings.  [T6638]
* gpg: Validate the trustdb after the import of a trusted key.  [T7200]
* gpg: Exclude expired trusted keys from the key validation process.  [T7200]
* gpg: Fix a wrong decryption failed status for signed and OCB encrypted messages without a signature verification key.  [T7042]
* gpg: Retain binary representation for import->export with Ed25519 key signatures.  [T7426]
* gpg: Fix comparing ed448 to ed25519 with --assert-pubkey-algo.  [T7425]
* gpg: Avoid a failure exit code for expired ultimately trusted keys.  [T7351]
* gpg: Emit status error for an invalid ADSK.  [T7322]
* gpg: Allow the use of an ADSK subkey as ADSK subkey.  [T6882]
* gpg: Fix --quick-set-expire for V5 subkey fingerprints.  [T7298]
* gpg: Robust error handling for SCD READKEY.  [T7309]
* gpg: Fix cv25519 v5 export regression.  [T7316]
* gpgsm: Nearly fourfold speedup of validated certificate listings.  [T7308]
* gpgsm: Improvement for some rare P12 files.  [rGf50dde6269]
* gpgsm: Terminate key listing on output write error.  [T6185]
* agent: Add option --status to the LISTRUSTED command.  [rG4275d5fa7a]
* agent: Fix detection of the yet unused trustflag de-vs.  [T5079]
* agent: Allow ssh to sign data larger than the Assuan line length.  [T7436]
* keyboxd: Fix a race condition on the database handle.  [T7294]
* dirmngr: A list of used URLs for loaded CRLs is printed first in the output of the LISTCRL command.  [T7337]

http://mevius.5ch.net/test/read.cgi/unix/1007324740/519

522: 名無しさん＠お腹いっぱい。 [sage] 2025/02/13(木) 00:42:17.71

GnuPG 2.5.4 (テスト版)

Noteworthy changes in version 2.5.4 (2025-02-12)
================================================
[compared to version 2.5.3]

* gpg: New option --disable-pqc-encryption.  [rG00c31f8b04]
* gpg: Fix --quick-add-key for Weierstrass ECC with usage given.  [T7506]
* gpg: Fix handling with no CRC armor.  [T7071]
* gpg: New private Kyber keys are now cross-referenced using a new Link attribute.  [T6638]
* gpg: Fix an import problem with keys having another primary key as a subkey.  [T7527]
* gpgsm: Allow unattended PKCS#12 export without passphrase.  [rG159e801043]
* gpgsm: Allow CSR generation with an unprotected key.  [rG89055f24f4]
* agent: New option --change-std-env-name.  [T7522]
* agent: Fix ssh-agent's request_identities for skipped Brainpool keys.  [rG2469dc5aae]
* Do not package zlib and bzip2 object files in a Speedo release build.  [T7442]

Release-info: https://dev.gnupg.org/T7480

http://mevius.5ch.net/test/read.cgi/unix/1007324740/522

526: 名無しさん＠お腹いっぱい。 [sage] 2025/05/09(金) 22:20:00.42

GnuPG 2.5.6 (テスト版) & Gpg4win 5.0.0-beta190

Noteworthy changes in version 2.5.6 (2025-05-08)
================================================
[compared to version 2.5.5]

* gpg: Add a flag to the filter expressions for left anchored substring match.  [rGc12b7d047e]
* gpg: New list option "show-trustsig" to avoid resorting to colon mode for this info.  [rG41d6ae8f41]
* gpg: New command --quick-tsign-key to create a trust signature.  [rGd90b290f97]
* gpg: New keygen parameter "User-Id".  [rGcfd597c603]
* gpg: New list options "show-trustsig".  [rGrG41d6ae8f41]
* gpg: Fix double free of internal data in no-sig-cache mode [T7547]
* gpg: Signatures from revoked or expired keys do not anymore show up as missing keys.  Fixes regression in 2.5.5.  [T7583]
* gpgsm: Extend --learn-card by an optional s/n argument.  [T7379]
* gpgsm: Skip expired certificates when selection a certificate by subject.  [rG4cf83273e8]
* card: New command "ll" as alias for "list --cards".  [rGd6ee7adebe]
* scd: Fix posssible lockup on Windows due to a lost select result.  [rGa7ec3792c5]
* scd:p15: Accept P15 cards with a zero-length label.  [rGdb25aa9887]
* keyboxd: Use case-insensitive search for mail addresses.  [T7576]
* dirmngr: Fix a problem in libdns related to an address change from 127.0.0.1.  [T4021]
* gpgconf: Fix reload and kill of keyboxd.  [T7569]
* Fix logic for certain recsel conditions.  [rG8968e84903]
* Add Solaris support to get_signal_name.  [T7638]
* Fix build error of the test shell on AIX.  [T7632]

Release-info: https://dev.gnupg.org/T7586

http://mevius.5ch.net/test/read.cgi/unix/1007324740/526

528: 名無しさん＠お腹いっぱい。 [sage] 2025/06/03(火) 09:22:28.77

GnuPG 2.5.7 (テスト版)

Noteworthy changes in version 2.5.7 (2025-06-02)
================================================
[compared to version 2.5.6]

* gpg: Allow updating a SHA-1 key certification w/o using the --force-sign-key option.  [T7663]
* gpg: The group key flag has now been fully implemented.  [rG8833a34bf0]
* gpg: Make combination of show-only-fpr-mbox and show-unusable-uid work.  [rGd5a4a2dc89]
* gpg: Do not allow compressed key packets on import.  [T7014]
* gpgsm: Allow an empty subject DN also during import.  [T7171]
* agent: Recover the old behavior with max-cache-ttl=0.  [T6681]
* agent: Fix ECC key on smartcard for composite KEM with PQC.  [T7648]
* scd: Fix a harmless read buffer over-read in a function used by PKCS#15 cards.  [T7662]
* gpg-mail-tube,wks: Support templates for mail content.  [T7381]
* Use the KEM interface of Libgcrypt for encryption/decryption.  [T7649]
* Fix a glitch in socket handling in Windows in case of a nonce mismatch.  [rG645cf7d8fc]

Release-info: https://dev.gnupg.org/T7671

Gpg4win 最新ベータ版(5.0.0-beta190)に入ってるのはまだgpg 2.5.6

http://mevius.5ch.net/test/read.cgi/unix/1007324740/528

534: 名無しさん＠お腹いっぱい。 [sage] 2025/09/03(水) 08:03:32.24

GnuPG 2.5.12 (テスト版だけど "fully supported and thus ready for production use" と謳ってる)
Gpg4winの新しいベータ版はまだ出てない

Noteworthy changes in version 2.5.12 (2025-09-02)
=================================================
[compared to version 2.5.11]

* gpg: New options --[no-]auto-key-upload.  [T7333]
* gpg: Keys send to an LDAP server are now first updated from that server.  New keyserver option "no-update-before-send" to disable this feature.  [T7730]
* gpg: Disable default compression for 7z compressed input.  [rG53252628de]
* gpg: Fix a regression with composite PQC and ECC algos.  [T7649]
* gpg: Fix the list of possible algos for --edit-key:addkey.  [T7788]
* gpg: Allow to select the Kyber variants with --edit-key:addkey.  [T7792]
* gpg: Avoid a second Pinentry pop-up for a configured ADSK during key generation.  [T7491]
* gpg: Change the ADSK key binding time to use the current time.  [T6882]
* gpgsm: Add option --no-qes-note and new trustlist flag "noconsent".  [T7713]
* agent: Enable "relax" in the trustlist by default and add flag "norelax".  [rG7b133027ae]
* agent: Fix a crash on Windows in the Putty support.  [T7799]
* dirmgr: Support LDAP servers using a schema like the Windows LDS servers.  [T7742]
* scd:openpgp: Support Yubikey attestation generation.  [rG5ddfedf24a]
* gpgtar: Fix regression in end-of-archive detection.  [T7757]

Release-info: https://dev.gnupg.org/T7756

http://mevius.5ch.net/test/read.cgi/unix/1007324740/534

上下前次 1-新書関写板覧索設栞歴

ｽﾚ情報赤ﾚｽ抽出画像ﾚｽ抽出歴の未読ｽﾚ AAｻﾑﾈｲﾙ

ぬこの手ぬこTOP 1.043s*