GnuPG 2.2.5 がリリース

no extension

GnuPG 2.2.5 がリリースされた。

今回もセキュリティ・アップデートはなし。 主な修正点は以下の通り。

  • gpg: Allow the use of the “cv25519” and “ed25519” short names in addition to the canonical curve names in --batch --gen-key.
  • gpg: Make sure to print all secret keys with option –list-only and --decrypt. [#3718]
  • gpg: Fix the use of future-default with --quick-add-key for signing keys. [#3747]
  • gpg: Select a secret key by checking availability under gpg-agent. [#1967]
  • gpg: Fix reversed prompt texts for --only-sign-text-ids. [#3787]
  • gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit systems. [#3770]
  • gpgsm: Fix regression since 2.1 in --export-secret-key-raw which got $d mod (q-1)$ wrong. Note that most tools automatically fixup that parameter anyway.
  • ssh: Fix a regression in getting the client’d PID on *BSD and macOS.
  • scd: Support the KDF Data Object of the OpenPGP card 3.3. [#3152]
  • scd: Fix a regression in the internal CCID driver for certain card readers. [#3508]
  • scd: Fix a problem on NetBSD killing scdaemon on gpg-agent shutdown. [#3778]
  • dirmngr: Improve returned error description on failure of DNS resolving. [#3756]
  • wks: Implement command --install-key for gpg-wks-server.
  • Add option STATIC=1 to the Speedo build system to allow a build with statically linked versions of the core GnuPG libraries. Also use --enable-wks-tools by default by Speedo builds for Unix.

最新版をインストールすると以下のようになる。

$ gpg --version
gpg (GnuPG) 2.2.5
libgcrypt 1.8.2
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Home: ********
サポートしているアルゴリズム:
公開鍵: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
暗号方式: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
    CAMELLIA128, CAMELLIA192, CAMELLIA256
ハッシュ: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
圧縮: 無圧縮, ZIP, ZLIB, BZIP2

アップデートは計画的に。

ブックマーク

参考図書

photo
暗号技術入門 第3版　秘密の国のアリス
結城 浩 (著)
SBクリエイティブ 2015-08-25 (Release 2015-09-17)
Kindle版
B015643CPE (ASIN)
評価     

SHA-3 や Bitcoin/Blockchain など新しい知見や技術要素を大幅追加。暗号技術を使うだけならこれ1冊でとりあえず無問題。

reviewed by Spiegel on 2015-09-20 (powered by PA-APIv5)