[pkg-gnupg-maint] Bug#800560: gnupg can't create a 4096-16384 bits length key. The old version can do this.

Gionatan Vianello debian-jvi at mes3hacklab.org
Wed Sep 30 21:32:36 UTC 2015


Package: gnupg
Version: 1.4.18-7
Severity: important

Dear Maintainer,

gnupg can generate RSA keys up to 16384 bits length.
On the new version there are some limitations to create large RSA keys.
Using old versions could generate long keys up to 16384 bits.
A limitation of key size is not right and can help NSA.
If there is some reason, it is put a disclaimer and not block the program with an error.
Some people may need to generate a large PGP key.
After DataGate should be possible to generate large.

-- System Information:
Debian Release: 8.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=it_IT.utf8, LC_CTYPE=it_IT.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gnupg depends on:
ii  gpgv          1.4.18-7
ii  libbz2-1.0    1.0.6-7+b3
ii  libc6         2.19-18
ii  libreadline6  6.3-8+b3
ii  libusb-0.1-4  2:0.1.12-25
ii  zlib1g        1:1.2.8.dfsg-2+b1

Versions of packages gnupg recommends:
pn  gnupg-curl     <none>
ii  libldap-2.4-2  2.4.40+dfsg-1

Versions of packages gnupg suggests:
pn  gnupg-doc     <none>
ii  imagemagick   8:6.8.9.9-5
ii  libpcsclite1  1.8.13-1
pn  parcimonie    <none>

-- no debconf information



More information about the pkg-gnupg-maint mailing list