<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>159870</bug_id>
          
          <creation_ts>2007-01-03 08:53 0000</creation_ts>
          <short_desc>dev-libs/libgcrypt-1.2.3 (Used by app-crypt/gnupg-2.X) does not support IDEA cipher</short_desc>
          <delta_ts>2008-03-27 06:01:35 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Linux</product>
          <component>Applications</component>
          <version>2006.1</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          <bug_file_loc>http://www.kfwebs.net/articles/article/42/GnuPG-2.0---IDEA-support</bug_file_loc>
          
          
          <priority>P2</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>159851</blocked>
          
          <everconfirmed>1</everconfirmed>
          <reporter>ulm@gentoo.org</reporter>
          <assigned_to>crypto@gentoo.org</assigned_to>
          <cc>che@chrekh.se</cc>
    
    <cc>matrixhax0r@gmail.com</cc>
    
    <cc>reg-gentoo@kfwebs.net</cc>
    
    <cc>zeekec@mad.scientist.com</cc>

      

      
          <long_desc isprivate="0">
            <who>ulm@gentoo.org</who>
            <bug_when>2007-01-03 08:53:04 0000</bug_when>
            <thetext>gnupg-2.0.1-r2 seems to break compatibility with old key files:

$ gpg -vv test.gpg
:pubkey enc packet: version 3, algo 1, keyid 0123456789ABCDEF
        data: [1024 bits]
gpg: public key is 98765432
gpg: protection algorithm 1 (IDEA) is not supported
:encrypted data packet:
        length: 30
gpg: encrypted with 1024-bit RSA key, ID 98765432, created 1995-05-02
      &quot;Abcd Efgh &lt;ijk@domain.invalid&gt;&quot;
gpg: public key decryption failed: Invalid cipher algorithm
gpg: decryption failed: No secret key

With gnupg-1.4.6, everything used to work fine.
 

$ emerge --info
Portage 2.1.2_rc4-r5 (default-linux/x86/2006.1/desktop, gcc-4.1.1, glibc-2.5-r0, 2.6.19-gentoo-r2 i686)
=================================================================
System uname: 2.6.19-gentoo-r2 i686 Intel(R) Pentium(R) M processor 1.73GHz
Gentoo Base System version 1.12.8
Last Sync: Wed, 03 Jan 2007 16:00:03 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
dev-java/java-config: 1.3.7, 2.0.31
dev-lang/python:     2.4.4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.14
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.19
ACCEPT_KEYWORDS=&quot;x86 ~x86&quot;
AUTOCLEAN=&quot;yes&quot;
CBUILD=&quot;i686-pc-linux-gnu&quot;
CFLAGS=&quot;-march=pentium-m -O2 -pipe -fomit-frame-pointer&quot;
CHOST=&quot;i686-pc-linux-gnu&quot;
CONFIG_PROTECT=&quot;/etc /usr/lib/fax /usr/share/X11/xkb /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/spool/fax/etc&quot;
CONFIG_PROTECT_MASK=&quot;/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo&quot;
CXXFLAGS=&quot;-march=pentium-m -O2 -pipe -fomit-frame-pointer&quot;
DISTDIR=&quot;/usr/portage/distfiles&quot;
FEATURES=&quot;autoconfig distlocks metadata-transfer sandbox sfperms strict&quot;
GENTOO_MIRRORS=&quot;http://mirrors.sec.informatik.tu-darmstadt.de/gentoo http://gentoo.osuosl.org http://gentoo.inode.at&quot;
MAKEOPTS=&quot;-j2&quot;
PKGDIR=&quot;/usr/portage/packages&quot;
PORTAGE_RSYNC_OPTS=&quot;--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages&quot;
PORTAGE_TMPDIR=&quot;/var/tmp&quot;
PORTDIR=&quot;/usr/portage&quot;
PORTDIR_OVERLAY=&quot;/usr/portage/local/ulm /usr/portage/local/layman/sunrise /usr/portage/local/layman/a1 /usr/portage/local/layman/xeffects&quot;
SYNC=&quot;rsync://rsync.gentoo.org/gentoo-portage&quot;
USE=&quot;X Xaw3d aalib acpi alsa amr asf berkdb bitmap-fonts bzip2 cairo caps cdparanoia cdr cli clisp cracklib crypt dbus directfb dlloader dri dvd dvdr eds emacs emacs-w3 emboss encode exif expat fam fbcon ffmpeg firefox fortran gcj gdbm gif glitz glut gnome gpm gstreamer gtk gtkhtml guile iconv idea ieee1394 imap ipv6 irda isdnlog java jbig jpeg libcaca libg++ logrotate mad mikmod mmx mng motif mozbranding mp3 mpeg ncurses nls nocd nptl nptlonly nsplugin offensive ogg opengl oss pcmcia pcre pdf perl png postgres ppds pppd python qt3 qt4 quicktime readline real recode reflection sdl session skey sox spell spl sse sse2 ssl tcpd tetex tiff truetype truetype-fonts type1-fonts udev unicode userlocales vorbis wifi win32codecs x86 xml xorg xv zlib&quot; ALSA_CARDS=&quot;ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci&quot; ALSA_PCM_PLUGINS=&quot;adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol&quot; ELIBC=&quot;glibc&quot; INPUT_DEVICES=&quot;keyboard mouse synaptics&quot; KERNEL=&quot;linux&quot; USERLAND=&quot;GNU&quot; VIDEO_CARDS=&quot;fbdev i810 vesa vga&quot;
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>alonbl@gentoo.org</who>
            <bug_when>2007-01-03 12:22:40 0000</bug_when>
            <thetext>Right.
IDEA is not supported by gcrypt.
I could not find any patch to add idea support into gcrypt.
I will continue looking.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>robbat2@gentoo.org</who>
            <bug_when>2007-01-03 14:19:27 0000</bug_when>
            <thetext>alonbl:
here is IDEA support for libgcrypt
http://www.kfwebs.net/articles/article/42/GnuPG-2.0---IDEA-support

It was discussed on the gnupg-devel mailing list.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>alonbl@gentoo.org</who>
            <bug_when>2007-01-04 11:41:42 0000</bug_when>
            <thetext>Thanks!
I had to do some modification to this patch, did not work as-is it couldn&apos;t have worked...

But it should be OK now, please add idea USE flag to libgcrypt and try it out.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>che@chrekh.se</who>
            <bug_when>2007-01-04 14:59:33 0000</bug_when>
            <thetext>I can&apos;t emerge world now, and I suspect that this somehow migt be responsible for that. (But I might be wrong also, I don&apos;t know enough about ebuilds)

When I do

  sudo emerge -DuavN --with-bdeps y world

I get 

These are the packages that would be merged, in order:

Calculating world dependencies... done!
Traceback (most recent call last):
  File &quot;/usr/bin/emerge&quot;, line 5254, in ?
    retval = emerge_main()
  File &quot;/usr/bin/emerge&quot;, line 5249, in emerge_main
    myopts, myaction, myfiles, spinner)
  File &quot;/usr/bin/emerge&quot;, line 4605, in action_build
    mydepgraph.display(
  File &quot;/usr/bin/emerge&quot;, line 2472, in display
    debug=self.edebug)
  File &quot;/usr/lib/portage/pym/portage.py&quot;, line 5748, in getfetchsizes
    myuris, myfiles = self.getfetchlist(mypkg,useflags=useflags)
  File &quot;/usr/lib/portage/pym/portage.py&quot;, line 5725, in getfetchlist
    myurilist = portage_dep.use_reduce(myurilist,uselist=useflags,matchall=all)
  File &quot;/usr/lib/portage/pym/portage_dep.py&quot;, line 193, in use_reduce
    additions = use_reduce(target, uselist, masklist, matchall, excludeall)
  File &quot;/usr/lib/portage/pym/portage_dep.py&quot;, line 200, in use_reduce
    raise portage_exception.InvalidDependString(
portage_exception.InvalidDependString: &quot;Conditional without parenthesis: &apos;idea?&apos;&quot;

This is my &apos;emerge --info&apos;

Portage 2.1.2_rc4-r5 (default-linux/x86/2006.1/desktop, gcc-4.1.1, glibc-2.5-r0, 2.6.19-gentoo-r2 i686)
=================================================================
System uname: 2.6.19-gentoo-r2 i686 AMD Athlon(tm) MP 2000+
Gentoo Base System version 1.13.0_alpha10
Last Sync: Thu, 04 Jan 2007 20:50:01 +0000
dev-java/java-config: 1.3.7, 2.0.31
dev-lang/python:     2.4.4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.14
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.19
ACCEPT_KEYWORDS=&quot;x86 ~x86&quot;
AUTOCLEAN=&quot;yes&quot;
CBUILD=&quot;i686-pc-linux-gnu&quot;
CFLAGS=&quot;-O3 -march=athlon-mp&quot;
CHOST=&quot;i686-pc-linux-gnu&quot;
CONFIG_PROTECT=&quot;/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config /var/bind&quot;
CONFIG_PROTECT_MASK=&quot;/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo&quot;
CXXFLAGS=&quot;-O3 -march=athlon-mp&quot;
DISTDIR=&quot;/usr/portage/distfiles&quot;
FEATURES=&quot;autoconfig distlocks metadata-transfer parallel-fetch sandbox sfperms strict&quot;
GENTOO_MIRRORS=&quot;http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo&quot;
LANG=&quot;sv_SE.utf8&quot;
LINGUAS=&quot;sv&quot;
MAKEOPTS=&quot;-j4&quot;
PKGDIR=&quot;/usr/portage/packages&quot;
PORTAGE_RSYNC_OPTS=&quot;--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages&quot;
PORTAGE_TMPDIR=&quot;/var/tmp&quot;
PORTDIR=&quot;/usr/portage&quot;
PORTDIR_OVERLAY=&quot;/usr/local/portage&quot;
SYNC=&quot;rsync://rsync.europe.gentoo.org/gentoo-portage&quot;
USE=&quot;3dnow 3dnowext X Xaw3d alsa ao apache2 audiofile berkdb bitmap-fonts bonobo bzip2 bzlib cairo caps cdda cddb cdio cdparanoia cdr cdrom chroot cli crypt curl dba dbus dlloader dri dvd dvdr dvdread eds emacs emboss encode esd fam firefox flac fluidsynth fortran ftp gcj gd gdbm gif glx gnome gphoto2 gstreamer gtk gtk2 gtkhtml hal iconv idea imagemagick imap innodb isdnlog ithreads jack java jikes jpeg kde libg++ mad mbox mikmod mime mmx mmxext mng motif mozilla mp3 mpeg musicbrainz ncurses net network nls noamazon nptl nptlonly nsplugin offensive ogg oggvorbis opengl pcre pda pdf perl plotutils png postgres ppds pppd python qt4 quicktime radeon readline real reflection sdl session sndfile sox spell spl sse ssl svg tcltk tcpd threads tiff timidity truetype truetype-fonts type1-fonts udev unicode usb userlocales utf8 visualization vorbis win32codecs x86 xfs xine xinerama xml xml2 xorg xosd xpm xv zlib&quot; ALSA_CARDS=&quot;ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci&quot; ALSA_PCM_PLUGINS=&quot;adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol&quot; ELIBC=&quot;glibc&quot; INPUT_DEVICES=&quot;keyboard mouse&quot; KERNEL=&quot;linux&quot; LINGUAS=&quot;sv&quot; USERLAND=&quot;GNU&quot; VIDEO_CARDS=&quot;fbdev radeon fglrx&quot;
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS

</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>che@chrekh.se</who>
            <bug_when>2007-01-04 15:02:07 0000</bug_when>
            <thetext>Just one more little bit of info

I just removed the file /usr/portage/dev-libs/libgcrypt/libgcrypt-1.2.3-r1.ebuild

And now I can emerge world again.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>zeekec@mad.scientist.com</who>
            <bug_when>2007-01-04 15:13:07 0000</bug_when>
            <thetext>There is a missing set of parentheses around the idea srource:
 !bindist? ( idea? (mirror://gentoo/${P}-idea.diff.bz2 ))</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ulm@gentoo.org</who>
            <bug_when>2007-01-04 15:38:50 0000</bug_when>
            <thetext>(In reply to comment #3)
&gt; But it should be OK now, please add idea USE flag to libgcrypt and try it out.

There is no more message about the unsupported IDEA algorithm. But the program now complains that the passphrase would be wrong. (I have _definitely_ used the correct passphrase and I have double checked this.)

$ gpg -vv test.gpg 
:pubkey enc packet: version 3, algo 1, keyid 0123456789ABCDEF
        data: [1024 bits]
gpg: public key is 98765432

You need a passphrase to unlock the secret key for
user: &quot;Xxx Yyy &lt;zzz@domain.invalid&gt;&quot;
1024-bit RSA key, ID 98765432, created 1995-05-02

gpg: no running gpg-agent - starting one
gpg: DBG: connection to agent established
gpg: Invalid passphrase; please try again ...

[repeated two times]

:encrypted data packet:
        length: 32
gpg: encrypted with 1024-bit RSA key, ID 98765432, created 1995-05-02
      &quot;Xxx Yyy &lt;zzz@domain.invalid&gt;&quot;
gpg: public key decryption failed: Bad passphrase
gpg: decryption failed: No secret key

Again, gnupg-1.4.6 has no problem with this file/key/passphrase.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>reg-gentoo@kfwebs.net</who>
            <bug_when>2007-01-04 15:59:34 0000</bug_when>
            <thetext>hmm, I&apos;ll have to look into that. </thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>reg-gentoo@kfwebs.net</who>
            <bug_when>2007-01-04 16:27:35 0000</bug_when>
            <thetext>btw, the workaround is to remove the passphrase from the key, it works then, but obviously not when the key is protected itself. </thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>reg-gentoo@kfwebs.net</who>
            <bug_when>2007-01-05 02:00:02 0000</bug_when>
            <thetext>Ok. will have to much around in gnupg / libgcrypt to fix this at a later point. Let me just say that this is not related to the IDEA package, but errors out before that. Easiest way to debug that is to do a gpg --show-session-key --homedir . -vv file.pgp using gpg 1.4 and get the session key, like gpg: session key: `1:9E1805541D862FBAAABBF1BABBF4F589&apos; that you can throw into the libgcrypt addon as gpg2 --override-session-key 1:9E1805541D862FBAAABBF1BABBF4F589 --homedir . -vv file.pgp

a gpg --verson will give Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA while gpg2 --version Pubkey: RSA, ELG, DSA, ELG . It is not a problem of password hashing differences, as it then would function if setting the password in gpg 2 in the first place (removing the password in pgp 2 or gnupg 1.4)

I tried to re-encrypt the key using gnupg 1.4 gpg --s2k-cipher-algo=Blowfish --s2k-digest-algo=sha1 --compress-algo=1 --homedir . --edit-key test , but it still bugs out. 

Historically key decryption has been handled by gnupg and the unencrypted key is  used by libgcrypt. the issue is probably either the un-encryption of the key in gnupg, although I would have presumed in this case that re-encrypting the secret key using gnupg1.4 would have fixed it. so I&apos;m starting to wonder if the troublemaker is RSA, with reference to the differences in the --version .

Anyone that is more familiar to gnupg that have an insight?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>alonbl@gentoo.org</who>
            <bug_when>2007-01-05 03:43:01 0000</bug_when>
            <thetext>Hmmm....
Thanks for the description!

From libgcrypt

./src/gcrypt.h:
enum gcry_pk_algos
  {
    GCRY_PK_RSA = 1,
    GCRY_PK_RSA_E = 2,      /* deprecated */
    GCRY_PK_RSA_S = 3,      /* deprecated */
    GCRY_PK_ELG_E = 16,     /* use only for OpenPGP */
    GCRY_PK_DSA   = 17,
    GCRY_PK_ELG   = 20
  };
cipher/rsa.c:
gcry_pk_spec_t _gcry_pubkey_spec_rsa =
  {
    &quot;RSA&quot;, rsa_names,
    &quot;ne&quot;, &quot;nedpqu&quot;, &quot;a&quot;, &quot;s&quot;, &quot;n&quot;,
    GCRY_PK_USAGE_SIGN | GCRY_PK_USAGE_ENCR,
&lt;snip&gt;

So the RSA_E, RSA_S are not implemented, only previous &quot;RSA&quot; is implemented.
Can you please verify that the key that is not working is part of RSA_E or RSA_S algorithms?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>reg-gentoo@kfwebs.net</who>
            <bug_when>2007-01-05 05:34:15 0000</bug_when>
            <thetext>Please keep in mind though, that if no password is set on the secret key, everything works. So at least something is implemented. So it has to be related to decryption of the secret key at one point or another. </thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>reg-gentoo@kfwebs.net</who>
            <bug_when>2007-01-05 06:18:14 0000</bug_when>
            <thetext>looking at the output from --debug-all across the two versions I notice that gpg2 comes to +gpg: DBG: parse_packet(iob=1): type=9 length=28 (parse.mainproc.c.1192)
 gpg: encrypted with 1024-bit RSA key, ID AAB61C01, created 2007-01-04
       &quot;test&quot;
+gpg: public key decryption failed: Bad passphrase

while gnupg 1.4.6 goes through -gpg: DBG: iobuf-1.1: push `decode_filter&apos;
-gpg: DBG: iobuf chain: 1.1 `decode_filter&apos; filter_eof=0 start=0 len=0
-gpg: DBG: iobuf chain: 1.0 `file_filter(fd)&apos; filter_eof=0 start=157 len=175
-gpg: DBG: iobuf-1.1: underflow: req=8192
 after -gpg: DBG: parse_packet(iob=1): type=9 length=28 (parse.mainproc.c.1203)

type=9 here represents conventionally encrypted data, id est the secret key.

gpg 1.4.6 does say gpg: DBG: pubkey_decrypt: algo=1 , so that indicate an ordinary RSA key, not RSA-E. 
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>alonbl@gentoo.org</who>
            <bug_when>2007-01-24 20:14:18 0000</bug_when>
            <thetext>Hello All,
Tried to get some help from gnupg mailing list, but got no response...
Can you please try to do this individually? I mean try to get some reply from upstream/user community?
Thanks!</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>reg-gentoo@kfwebs.net</who>
            <bug_when>2007-01-24 20:24:17 0000</bug_when>
            <thetext>I tried to get some info from gnupg-devel ( http://lists.gnupg.org/pipermail/gnupg-devel/2007-January/023511.html ). I&apos;m currently trying to debug it myself by altering the source systematically to try to find where it errors, but have so far been unsuccessful. 

Again, I would like to mention that everything works if the secret key is not password protected. Which makes it even more bizarre that it errors when a password is added to the private key.

Sadly I don&apos;t have too much available time, but I&apos;ll keep looking for a reason it fails, as it tickles my curiosity. </thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>alonbl@gentoo.org</who>
            <bug_when>2007-01-24 20:41:03 0000</bug_when>
            <thetext>Thanks for your help!

I am curios... Upstream does not support IDEA... Any reason why you all use this algorithm?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>robbat2@gentoo.org</who>
            <bug_when>2007-01-24 20:48:16 0000</bug_when>
            <thetext>alonbl: upstream doesn&apos;t support it because it&apos;s patented, but there is a usage case for it because PGP2.0 uses it, and if you want to interoperate between GnuPG and PGP2.0, you need it :-(.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>reg-gentoo@kfwebs.net</who>
            <bug_when>2007-01-24 20:53:14 0000</bug_when>
            <thetext>There are several existing / old systems using pgp back to version 2.x, not to mention old emails in my archive encrypted to an old key of mine. I keep the ~/.gnupg folder and the emails in an encrypted volume itself, so I&apos;m not particulary worried of anyone grabbing the old PGP key (which is only used to get some archived messages anyways these days), so I can live with it not having a password I guess.

I still have difficulty believing the problem is with the IDEA part of it all, if that was the case it wouldn&apos;t have worked at all. I tried to eliminate that option by using another s2k cipher to encrypt the private asymmetric key using CAST5 instead of IDEA (although it resulted in annoyingly many replies on that specific element in gnupg-devel ) :p

At this point the motivation is really my annoyance of it not working as I want it to, though. </thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ulm@gentoo.org</who>
            <bug_when>2007-03-26 06:31:06 0000</bug_when>
            <thetext>Given that no immediate solution seems to be at hand, would it be possible to reconsider SLOTting for the gnupg package?
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>alonbl@gentoo.org</who>
            <bug_when>2007-06-17 19:38:19 0000</bug_when>
            <thetext>Hello all,

Unfortunately, The original patch author will not fix this problem any soon.

As I have never used IDEA, can someone create a scenario of:
1. Creating IDEA encrypted keys or IDEA keys (gpg1)
2. Testing these keys working (gpg1).
3. Showing the same keys are not working (gpg2).
4. Remove IDEA encryption from key (gpg1), show that works (gpg2).

This will save much time for me.
I have some free time this week-end.

Thanks!</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ulm@gentoo.org</who>
            <bug_when>2007-06-17 20:35:24 0000</bug_when>
            <thetext>Created an attachment (id=122353)
Example PGP 2.6.3 public key

</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ulm@gentoo.org</who>
            <bug_when>2007-06-17 20:36:00 0000</bug_when>
            <thetext>Created an attachment (id=122355)
Example PGP 2.6.3 secret key

</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ulm@gentoo.org</who>
            <bug_when>2007-06-17 20:44:35 0000</bug_when>
            <thetext>(In reply to comment #20)
&gt; As I have never used IDEA, can someone create a scenario of:
&gt; 1. Creating IDEA encrypted keys or IDEA keys (gpg1)

I have attached a key pair, generated with PGP 2.6.3in. Passphrase is &quot;abc&quot; (without the quotes).

&gt; 2. Testing these keys working (gpg1).
&gt; 3. Showing the same keys are not working (gpg2).

Hm, it&apos;s the same messages as in comment #7.

&gt; 4. Remove IDEA encryption from key (gpg1), show that works (gpg2).

I&apos;ve never done that before, but will try and attach the unencrypted key if I succeed.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ulm@gentoo.org</who>
            <bug_when>2007-06-17 20:51:26 0000</bug_when>
            <thetext>Created an attachment (id=122357)
Secret key with passphrase removed

This works for decrypting with gpg-2.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ulm@gentoo.org</who>
            <bug_when>2007-06-19 07:23:22 0000</bug_when>
            <thetext>Maybe I should summarize the behaviour for gpg 1 and 2, w.r.t. the attached keys:

- gnupg-1.4.7-r1 works well with all three attached keys.
- gnupg-2.0.4 works with the public key from attachment #122353.
- gnupg-2.0.4 also works with the secret key from attachment #122357 where the
  passphrase was removed.
- However, gnupg-2.0.4 does _not_ work with the secret key from
  attachment #122355. For this one, it does not accept the passphrase
  (message &quot;invalid passphrase&quot;).
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>alonbl@gentoo.org</who>
            <bug_when>2007-06-22 15:19:18 0000</bug_when>
            <thetext>Created an attachment (id=122810)
gnupg-2.0.4-idea.patch

OK... There are two bytes that are part of the checksum but not part of the key.
So remove them before the key decode seems like a solution.
Can you please check it out with your configuration?</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ulm@gentoo.org</who>
            <bug_when>2007-06-22 15:59:57 0000</bug_when>
            <thetext>(In reply to comment #26)
&gt; Created an attachment (id=122810) [edit]
&gt; gnupg-2.0.4-idea.patch

Good work!

&gt; OK... There are two bytes that are part of the checksum but not part of the
&gt; key.
&gt; So remove them before the key decode seems like a solution.
&gt; Can you please check it out with your configuration?

Yes, it is functioning nicely with all test cases that I have here.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>alonbl@gentoo.org</who>
            <bug_when>2007-06-22 16:47:31 0000</bug_when>
            <thetext>Great!
Thank you.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>alonbl@gentoo.org</who>
            <bug_when>2008-03-27 06:01:35 0000</bug_when>
            <thetext>Created an attachment (id=147425)
test.msg

$ GNUPGHOME=. gpg --decrypt &lt; test.msg</thetext>
          </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>122353</attachid>
            <date>2007-06-17 20:35 0000</date>
            <desc>Example PGP 2.6.3 public key</desc>
            <filename>public.asc</filename>
            <type>text/plain</type>
            <data encoding="base64">VHlwZSBCaXRzL0tleUlEICAgIERhdGUgICAgICAgVXNlciBJRApwdWIgIDEwMjQvNjgxQTA2Q0Ig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</data>        

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>122355</attachid>
            <date>2007-06-17 20:36 0000</date>
            <desc>Example PGP 2.6.3 secret key</desc>
            <filename>secret.asc</filename>
            <type>text/plain</type>
            <data encoding="base64">VHlwZSBCaXRzL0tleUlEICAgIERhdGUgICAgICAgVXNlciBJRApzZWMgIDEwMjQvNjgxQTA2Q0Ig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==
</data>        

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>122357</attachid>
            <date>2007-06-17 20:51 0000</date>
            <desc>Secret key with passphrase removed</desc>
            <filename>secret2.asc</filename>
            <type>text/plain</type>
            <data encoding="base64">LS0tLS1CRUdJTiBQR1AgUFJJVkFURSBLRVkgQkxPQ0stLS0tLQpWZXJzaW9uOiBHbnVQRyB2MS40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</data>        

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>122810</attachid>
            <date>2007-06-22 15:19 0000</date>
            <desc>gnupg-2.0.4-idea.patch</desc>
            <filename>gnupg-2.0.4-idea.patch</filename>
            <type>text/plain</type>
            <data encoding="base64">ZGlmZiAtdXJOcCBnbnVwZy0yLjAuNC5vcmcvZzEwL3NlY2tleS1jZXJ0LmMgZ251cGctMi4wLjQv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</data>        

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>147425</attachid>
            <date>2008-03-27 06:01 0000</date>
            <desc>test.msg</desc>
            <filename>test.msg</filename>
            <type>text/plain</type>
            <data encoding="base64">hIwDEqztY2gaBssBA/4pzvgVCtkJKQAdYHdyNhkeoiHzsnvRdwdmGBFcbBemApSUvTTR/CysERLL
IG/O9smhQLbN66OZqiiHPxB30qbI1VqnxE7y+lBVl1T0SMVxtq5dM/3qSaEpLpN3qPjx/I5qrhaO
y21UdGPUi0cvZv8Ov01QpDu8OO920DJSyz7X/ckhQBMbrYe8I2/uLmbrYZjCq2hxI6axSE8tLNbU
XqyQiH0H
</data>        

          </attachment>
    </bug>

</bugzilla>