diff options
| author | Danilo M. <danix@danix.xyz> | 2026-11-02 10:09:49 +0100 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-11-02 10:09:49 +0100 |
| commit | 1c4d04c2089f719e8344f6c4f5cd8488c2320e9f (patch) | |
| tree | b4d3f432f7ebf558af01186601745e0402e135e4 /crypto/pgpainless/src/test/resources/gnupg_ocb_sec | |
| parent | 9b8a56cb859f45845a620d7de344079e6a91d7c9 (diff) | |
| download | HardenedPass-1c4d04c2089f719e8344f6c4f5cd8488c2320e9f.tar.gz HardenedPass-1c4d04c2089f719e8344f6c4f5cd8488c2320e9f.zip | |
build(deps): update Bouncy Castle to 1.86 and PGPainless to 1.7.8
Bouncy Castle 1.78.1 is affected by GHSA-574f-3g2m-x479,
GHSA-9pwp-9qqc-pr26, GHSA-c3fc-8qff-9hwx and GHSA-qp49-qgx5-5m26, all
fixed by 1.85. PGPainless 1.7.8 is the newest 1.x release. A root
resolution rule keeps every Bouncy Castle module on the catalog version;
before, bcpg 1.77 shipped next to bcprov 1.78.1.
The new stack decrypts the OCB (LibrePGP) packets GnuPG 2.3+ emits by
default, which the old one rejected as "non-standard AEAD". Drop the
NonStandardAEAD error, its bottom sheet and strings, and replace the
mislabelled aead_* fixtures (SHA-1 self-signed keys plus a message
encrypted to an unrelated key) with a real GnuPG 2.5 key and OCB message
that the tests now decrypt. The new fixture is a throwaway test key, so
it is allowlisted in .gitleaksignore by fingerprint.
Fix KeyUtils.isKeyUsable, which compared a Boolean to null and so
accepted every key that parsed, including keys with no encryption
subkey. A signing-only key fixture now covers the rejection path.
Also: migrate the removed SelectUserId.firstMatch and deprecated
addDecryptionPassphrase APIs, keep one copy of the Bouncy Castle
META-INF/LICENSE.md in the APK, and move the existing InvalidPackage
lint baseline entries to the bcpkix 1.86 jar.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'crypto/pgpainless/src/test/resources/gnupg_ocb_sec')
| -rw-r--r-- | crypto/pgpainless/src/test/resources/gnupg_ocb_sec | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/crypto/pgpainless/src/test/resources/gnupg_ocb_sec b/crypto/pgpainless/src/test/resources/gnupg_ocb_sec new file mode 100644 index 00000000..e91d7df0 --- /dev/null +++ b/crypto/pgpainless/src/test/resources/gnupg_ocb_sec @@ -0,0 +1,18 @@ +-----BEGIN PGP PRIVATE KEY BLOCK----- + +lIYEauhQJRYJKwYBBAHaRw8BAQdAbpP/vX+rAng4A46YUZ1NMURKSkvNS0UPOZPy +1D7avk3+BwMC9e5bxxzpzc//2zvQ0TdwE4lqi5Lbjm4LAKe3NL4qOCcuZUWk5voy +4df6LLKRPFDVTBq/7JbIBvaOOBr8M/wjOgo6/vqnGj4XInt5975buLQfSm9obiBE +b2UgPGpvaG4uZG9lQGV4YW1wbGUuY29tPoivBBMWCgBXFiEEetBjyKz3tBaENPNJ +WngbP50zuXoFAmroUCUbFIAAAAAABAAObWFudTIsMi41KzEuMTIsMiwyAhsDBQsJ +CAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEFp4Gz+dM7l6DRoBAMJc0lnEHFtb +x9bX2q3ZjuWZMRFFvCEtBXKzi/8VobvsAQD4m5c2Wl0+QCHl3Fa/JUcnbB4g8xvJ +6qXk86fu8fTND5yLBGroUCUSCisGAQQBl1UBBQEBB0DLn1Rbk8SIqgwix4FwHkSe +QAPixLvJYLWkS7ZddD9hUwMBCAf+BwMC+dAO/JFwC+//mzU4/YsJbF+N3cSUMJ3U +fclSmRfaOcWbFBjSzWG2CSVQJqJkgkamYBKIJY8Iw7hF4Fj67vBi5/tJYCzk2Sn7 +M1c45TTwpoiUBBgWCgA8FiEEetBjyKz3tBaENPNJWngbP50zuXoFAmroUCUbFIAA +AAAABAAObWFudTIsMi41KzEuMTIsMiwyAhsMAAoJEFp4Gz+dM7l6UNcA/R4HA0XJ +1EQB2Vv2IR6zLe+vOHKK8j9LCBWmXv8eMhFrAQC11yEWH7SuXKedxRkTsVS4V6dO +/stzkZYyq7lRWmNFCg== +=eelL +-----END PGP PRIVATE KEY BLOCK----- |