[pkg-gnupg-maint] Bug#787385: gpg ignores options for s2k-digest-algo

Martin Vegter martin.vegter9 at gmail.com
Sun May 31 23:41:59 UTC 2015


Package: gnupg
Version: 1.4.12-7+deb7u7

When generating a new key pair, gpg sets the digest algorithm to the
default SHA1 and completely ignores non-default settings specified
with s2k-digest-algo.

This happens both when specified on the commandline:

    gpg --s2k-digest-algo SHA256 --gen-key

or when specified in the config file ~/.gnupg/gpg.conf

    s2k-digest-algo SHA256

After the key has been generated, gpg --list-packets shows
    iter+salt S2K, algo: 3, SHA1 protection, hash: 8, salt: blablabla

I have tried using SHA256 and SHA512, both are ignored, even though
both are listed as supported when invoked
    gpg --version



More information about the pkg-gnupg-maint mailing list