KB Sriram c10c31b5e9 x/crypto/openpgp: cross-signature validation for signing subkeys. ...

Section 11.1 of RFC4880 requires that binding signatures on
signing subkeys contain a valid embedded signature that cross-certifies
the primary key. This is to avoid the weakness described at
https://www.gnupg.org/faq/subkey-cross-certify.html

Fixes #10740

Change-Id: Ibe039662497832945957b001a83080ba29213703
Reviewed-on: https://go-review.googlesource.com/9799
Reviewed-by: Adam Langley <agl@golang.org>

2015-05-31 18:57:27 +00:00

..

armor

crypto: add import comments.

2014-12-09 23:26:36 +00:00

clearsign

crypto: add import comments.

2014-12-09 23:26:36 +00:00

elgamal

crypto: add import comments.

2014-12-09 23:26:36 +00:00

errors

crypto: add import comments.

2014-12-09 23:26:36 +00:00

packet

x/crypto/openpgp: cross-signature validation for signing subkeys.

2015-05-31 18:57:27 +00:00

s2k

crypto: add import comments.

2014-12-09 23:26:36 +00:00

canonical_text_test.go

go.crypto: initial code

2012-01-25 15:31:12 -05:00

canonical_text.go

go.crypto: initial code

2012-01-25 15:31:12 -05:00

keys_test.go

x/crypto/openpgp: cross-signature validation for signing subkeys.

2015-05-31 18:57:27 +00:00

keys.go

crypto/openpgp: select newest valid encryption subkey

2015-05-31 17:36:15 +00:00

read_test.go

x/crypto/openpgp: Limit packet recursion depth.

2015-05-08 01:16:24 +00:00

read.go

x/crypto/openpgp: Limit packet recursion depth.

2015-05-08 01:16:24 +00:00

write_test.go

go.crypto/openpgp: don't select expired keys.

2013-07-22 18:23:28 -04:00

write.go

go.crypto: use golang.org/x/... import paths

2014-11-10 08:50:25 +11:00