KB Sriram
c10c31b5e9
x/crypto/openpgp: cross-signature validation for signing subkeys.
...
Section 11.1 of RFC4880 requires that binding signatures on
signing subkeys contain a valid embedded signature that cross-certifies
the primary key. This is to avoid the weakness described at
https://www.gnupg.org/faq/subkey-cross-certify.html
Fixes #10740
Change-Id: Ibe039662497832945957b001a83080ba29213703
Reviewed-on: https://go-review.googlesource.com/9799
Reviewed-by: Adam Langley <agl@golang.org >
2015-05-31 18:57:27 +00:00
Keith Ball
326f0c56aa
crypto/openpgp: select newest valid encryption subkey
...
Change-Id: I5ae662e95d9f0f0cbcbf0b15b6c7c52c51521cca
Reviewed-on: https://go-review.googlesource.com/8726
Reviewed-by: Adam Langley <agl@golang.org >
2015-05-31 17:36:15 +00:00
Andrew Gerrand
a73c6bbfc5
go.crypto: use golang.org/x/... import paths
...
LGTM=bradfitz
R=rsc, bradfitz
CC=golang-codereviews
https://golang.org/cl/167190043
2014-11-10 08:50:25 +11:00
Adam Langley
84ca184138
go.crypto/openpgp: fix user id signing.
...
Entity.SignIdentity used the wrong signature function and produced invalid
certification signatures. Fixed.
VerifyUserIdSignature was used for checking the self-signature on an identity,
but didn't support anything but a self-signature. This change alters the
low-level API so that checking cross-signatures is possible.
Fixes golang/go#7371 .
LGTM=bradfitz
R=bradfitz
CC=golang-codereviews
https://golang.org/cl/96240043
2014-05-12 11:23:48 -07:00
Adam Langley
aa3adaf1aa
go.crypto/openpgp: check for revoked keys.
...
R=agl
CC=golang-codereviews
https://golang.org/cl/95050043
2014-05-05 11:41:50 -07:00
Adam Langley
eb19e229bd
go.crypto/openpgp: don't select expired keys.
...
When selecting keys for encryption, don't select keys that have
expired.
Fixes golang/go#5808 .
R=bradfitz
CC=golang-dev
https://golang.org/cl/10847043
2013-07-22 18:23:28 -04:00
KB Sriram
Keith Ball
Andrew Gerrand
Adam Langley