Commit Graph

1651 Commits

Author SHA1 Message Date
Daniel Huigens
8fa3aadea2 Add and require primary key binding signatures on signing keys
Also, fix keyFlags of signing subkeys.

Also, store Issuer Key ID and Embedded Signature in unhashed rather
than hashed subpackets.
2018-11-05 11:47:45 +01:00
Daniel Huigens
8c97112449 Throw on critical unknown signature subpackets 2018-11-05 11:47:44 +01:00
Daniel Huigens
47138eed61 Don't trust unhashed signature subpackets
Also, export packet.Signature.prototype.read_sub_packets.
2018-11-05 11:47:43 +01:00
Daniel Huigens
327d3e5392 Only accept binary or text signatures when verifying messages 2018-11-05 11:47:39 +01:00
Sanjana Rajan
17f639bc8d
Merge pull request #795 from twiss/web-crypto-hashing
Web Crypto hashing
2018-11-05 11:38:41 +01:00
Daniel Huigens
2245df6023 Don't return streams in openpgp.revokeKey() 2018-11-05 11:15:39 +01:00
Daniel Huigens
4faa84daa0 Inline iterated S2K loop 2018-11-01 15:40:04 +01:00
Daniel Huigens
a250ee9f91 Clean up checksum calculation 2018-11-01 14:47:22 +01:00
Daniel Huigens
e8a2c45390 Only use Web Crypto for hashing beyond a treshold number of bytes
Sending data to the Web Crypto API involves some latency.
2018-11-01 14:47:22 +01:00
Daniel Huigens
7253df1632 Don't hash when comparing key fingerprints 2018-11-01 14:47:21 +01:00
Daniel Huigens
abce79b509 Use Web Crypto for hashing 2018-11-01 14:11:22 +01:00
Sanjana Rajan
3c45b6f18a
Merge pull request #793 from twiss/signature-errors
Check that one-pass signatures match their corresponding signature
2018-11-01 12:13:02 +01:00
Daniel Huigens
11fd2313a7 Fix unhandled promise rejection when decrypting non-MDC message 2018-11-01 11:46:43 +01:00
Daniel Huigens
13c29b1fc9 Fix decryption with multiple passwords 2018-11-01 11:46:27 +01:00
Sanjana Rajan
09def1208d
Merge pull request #790 from nickmi/master
fixed key lookup example on  README.md
2018-11-01 11:41:12 +01:00
Daniel Huigens
d442b6bad7 Throw when signature packet does not correspond to one pass signature packet 2018-10-29 11:47:39 +01:00
Daniel Huigens
9c82bf491e Reject signatures[*].verified and signatures[*].signature on read errors
However, don't throw "unhandled promise rejection" when not using these
properties at all, or when they reject before the user has a chance to
handle them.
2018-10-29 11:47:36 +01:00
Daniel Huigens
c3419e5cd0 Don't return streams in openpgp.reformatKey() 2018-10-25 19:41:59 +02:00
nickmi
cdec95cb21
Update README.md 2018-10-23 23:05:24 +03:00
nickmi
50e522f34a
Update README.md 2018-10-23 18:58:17 +03:00
Sanjana Rajan
3c1d89bbb5 Release new version 2018-10-20 19:03:51 +02:00
Sanjana Rajan
7a2e0dcdf2
Merge pull request #787 from twiss/perf-fix-large-msgs
Fix performance issue with handling large messages
2018-10-20 18:59:21 +02:00
Daniel Huigens
baaa0716b4 Fix performance issue with handling large messages 2018-10-19 15:09:33 +02:00
Sanjana Rajan
f15b648b01 edit README wording 2018-10-12 17:27:09 +02:00
Sanjana Rajan
b972bd8e09
Merge pull request #782 from ZelphirKaltstahl/master
added helpful comment about default encryption and decryption of U8in…
2018-10-12 17:13:51 +02:00
Hans-Werner Roitzsch
12418921d0 adapted comment for pull request 2018-10-12 16:19:22 +02:00
Hans-Werner Roitzsch
2f1f901fdf added helpful comment about default encryption and decryption of U8intArray with password 2018-10-11 11:51:23 +02:00
Daniel Huigens
6f9670cc65 Clarify comment explaining packetlist's usage of supportsStreaming 2018-10-10 18:21:02 +02:00
Sanjana Rajan
c3b33c4251
Merge pull request #781 from evildvl/patch-1
Multiple public keys code
2018-10-10 18:20:21 +02:00
Sanjana Rajan
1e3f223e8b
Merge pull request #779 from twiss/throw-parse-errors
Throw on parse errors in integrity protected encrypted packets
2018-10-10 18:16:59 +02:00
Stanislav Mikhaylov
a4276677b8
Update function to be clear
Update function to be clear and without hardcoded payload
2018-10-09 11:10:27 +03:00
Stanislav Mikhaylov
9f8c93dc04
Multiple public keys example 2018-10-09 10:51:38 +03:00
Stanislav Mikhaylov
ee1bcce275
Multiple public keys code
Update README.md with the code example by @avimar (https://github.com/openpgpjs/openpgpjs/issues/271#issuecomment-274901731). Think that it's too hard to find and missed in documentation.
2018-10-08 18:23:54 +03:00
Daniel Huigens
bc6118980f Throw on parse errors in integrity protected encrypted packets 2018-10-05 12:40:05 +02:00
Sanjana Rajan
a6e3ada438 Release new version 2018-10-04 23:43:46 -07:00
Sanjana Rajan
28ca741561
Merge pull request #778 from twiss/missing-sig-packet
Don't hang when signature packet corresponding to one-pass sig is missing
2018-10-04 23:21:02 -07:00
Daniel Huigens
3751731330 Don't hang when signature packet corresponding to one-pass sig is missing 2018-10-04 22:13:10 +02:00
Sanjana Rajan
150222bee5 Release new version 2018-09-25 16:38:51 -07:00
Sanjana Rajan
a35b4d28e0
Merge pull request #772 from twiss/getLatestValidSignature
Check validity and keyid of signatures before using them
2018-09-22 16:27:07 -07:00
Daniel Huigens
ac6b57781b Make isValid*KeyPacket inner functions 2018-09-22 23:03:10 +02:00
Daniel Huigens
bbcdacef8d Small documentation fixes 2018-09-22 23:03:10 +02:00
Daniel Huigens
b3af56b8a3 Ignore third-party revocation signatures
This check was removed in ec22dab.
2018-09-22 23:03:10 +02:00
Daniel Huigens
a1c47ecdea Indicate an error when parsing a key with an authorized revocation key
Since we will ignore revocation signatures from authorized revocation keys,
it is dangerous to use these keys.
2018-09-22 23:03:10 +02:00
Daniel Huigens
5cf61daa19 Check validity of signatures before using them 2018-09-22 23:03:10 +02:00
Sanjana Rajan
9614e8fc21
Merge pull request #773 from KAYLukas/master
Add missing browserify command
2018-09-20 12:18:03 -07:00
Kay Lukas
7a167fcccb Add missing browserify command 2018-09-20 14:20:47 +02:00
Sanjana Rajan
cccebd0272 Release new version 2018-09-17 13:18:05 -07:00
Sanjana Rajan
528e544d04
Merge pull request #771 from twiss/publish-compat-npm
Publish compat files to npm
2018-09-17 12:56:44 -04:00
Sanjana Rajan
7ad492783a
Merge pull request #769 from twiss/armor-newlines-consistency
Make newlines in armored objects consistent
2018-09-17 12:56:25 -04:00
Daniel Huigens
682548485a Publish compat files to npm 2018-09-14 14:30:58 +02:00