ProtonMail/gopenpgp

GopenPGP miscomputes "v5" signatures

Opened this issue · 0 comments

GopenPGP 2.7.4 miscomputes draft-koch-openpgp-2015-rfc4880bis (aka "v5 OpenPGP") signatures. The signatures roundtrip fine, but are rejected by OpenPGP.js 5.5.0 and GnuPG 2.4.0. Signatures created by OpenPGP.js 5.5.0 and GnuPG 2.4.0 are rejected by GopenPGP 2.7.4.

There may also be some kind of packet corruption, as both Sequoia and OpenPGP.js report a packet truncation.

https://tests.sequoia-pgp.org/#Sign_Encrypt-Decrypt_Verify_roundtrip_with_key__Emma_

Consider dropping support for "v5" signatures (see #260). If no one complained about broken signatures so far, it is likely not used in the wild.