diff options
-rw-r--r-- | AUTHORS | 13 | ||||
-rw-r--r-- | ChangeLog | 8 | ||||
-rw-r--r-- | INSTALL | 14 | ||||
-rw-r--r-- | README | 111 | ||||
-rw-r--r-- | THANKS | 3 | ||||
-rw-r--r-- | acconfig.h | 3 | ||||
-rw-r--r-- | acinclude.m4 | 21 | ||||
-rw-r--r-- | cipher/ChangeLog | 5 | ||||
-rw-r--r-- | cipher/des.c | 69 | ||||
-rw-r--r-- | configure.in | 2 | ||||
-rw-r--r-- | doc/Makefile.am | 22 |
11 files changed, 188 insertions, 83 deletions
@@ -52,21 +52,22 @@ koch@hsp.de TRANSLATIONS Gregory Steuck 1998-10-20 -Disclaimer. [ru?] +Disclaimer. [ru] steuck@iname.com -TRANSLATIONS Urko Lusa Okay -es_ES.po +TRANSLATIONS Urko Lusa +Disclaimer. [es_ES] +ulusa@lacueva.ddns.org -TRANSLATIONS Thiago Jung Bauermann Okay -pt_BR.po +TRANSLATIONS Thiago Jung Bauermann +Disclaimer. [pt_BR] jungmann@cwb.matrix.com.br TRANSLATIONS Janusz Aleksander Urbanowicz 1999-01-09 -pl.po +Disclaimer. [po] alex@bofh.torun.pl @@ -1,3 +1,11 @@ +Mon Sep 6 19:59:08 CEST 1999 Werner Koch <wk@isil.d.shuttle.de> + + + * configure.in: Create makefile in doc/gph + + * acinclude.m4 (GNUPG_FUNC_MKDIR_TAKES_ONE_ARG): New + * configure.in: use the above. + Thu Sep 2 16:40:55 CEST 1999 Werner Koch <wk@isil.d.shuttle.de> @@ -55,6 +55,20 @@ assembler replacements are in C and in mpi/generic; never delete udiv-qrnnd.S in any CPU directory, because there may be no C substitute. Don't forget to delete "config.cache" and run "./config.status --recheck". +Some make tools are broken - the best solution is to use GNU's make. Try +gmake or grab the sources from a GNU archive and install them. + +On some OSF you may get unresolved externals. This is a libtool problem and +the workaround is to manually remove all the "-lc -lz" but the last one from +the linker line and execute them manually. + +On some architectures you get warnings like: + longlong.h:175: warning: function declaration isn't a prototype +or + http.c:647: warning: cast increases required alignment of target type +This doesn't matter and we know about it (actually it is due to the some +warning options which we have enabled for gcc) + The Random Device ================= @@ -2,21 +2,17 @@ GnuPG - The GNU Privacy Guard ------------------------------- - Version 0.9.11 + Version 1.0 - GnuPG is a tool for secure communication and data storage. It - can be used to encrypt data and to create digital signatures. + GnuPG is GNU's tool for secure communication and data storage. + It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant - to the proposed OpenPGP Internet standard as described in RFC2440. + with the proposed OpenPGP Internet standard as described in RFC2440. - GnuPG is now in Beta test and you should report all bugs to the - mailing list (see below). The 0.9.x versions are released mainly - to fix all remaining serious bugs. As soon as version 1.0 is out, - development will continue with a 1.1 series and bug fixes for the - 1.0 version as needed. - - GnuPG works best on GNU/Linux or *BSD. Other Unices are - also supported but are not as well tested as the Free Unices. + GnuPG works best on GNU/Linux or *BSD systems. Most other Unices + are also supported but are not as well tested as the Free Unices. + See http://www.gnupg.org/gnupg.html#supsys for a list of systems + which are known to work. See the file COPYING for copyright and warranty information. @@ -32,7 +28,7 @@ algorithms are: 3DES, Blowfish, CAST5 and Twofish (GnuPG does not yet create Twofish encrypted messages because there is no agreement in the OpenPGP WG on how to use it together with a MDC algorithm) - Digest algorithms available are MD5, RIPEMD160, SHA1, and TIGER/192. + Digest algorithms available are MD5, RIPEMD160 and SHA1. Installation @@ -58,9 +54,9 @@ 7) You end up with a "gpg" binary in /usr/local/bin. Note: Because some old programs rely on the existence of a - binary named "gpgm"; you should install a symbolic link - from gpgm to gpg: - "cd /usr/local/bin; ln -s gpg gpgm" + binary named "gpgm" (which was build by some Beta versions + of GnuPG); you may want to install a symbolic link to it: + "cd /usr/local/bin; ln -s gpg gpgm" 8) To avoid swapping out of sensitive data, you can install "gpg" as suid root. If you don't do so, you may want to add the option @@ -127,7 +123,7 @@ $ md5sum gnupg-x.y.z.tar.gz.sig - This should yield an output similar to this: + This should yield an output similar_to this: fd9351b26b3189c1d577f0970f9dcadc gnupg-x.y.z.tar.gz @@ -135,18 +131,30 @@ published via the announcement list and probably via Usenet. - Introduction - ------------ - A draft version of the manual is included in the subdirectory doc - and some HOWTO documents are available online; dor a listing see: + Documentation + ------------- + + A draft version of the manual is included in the subdirectory doc/gph. + The supplied version is rendered in HTML and you may access it with any + browser (e.g.: lynx doc/gpg/index.html). The GnuPG webpages have a link + to the latest development version and you may want to read those instead. + + A couple of HOWTO documents are available online; for a listing see: http://www.gnupg.org/docs.html#howtos + A man page with a description of all commands and options gets installed + along with the program. + + + Introduction + ------------ + Here is a brief overview on how to use GnuPG - it is strongly suggested that you read the manual and other information about the use of - cryptography. GnuPG is only a tool, secure results require that YOU - KNOW WHAT YOU ARE DOING. + cryptography. GnuPG is only a tool, secure usage requires that + YOU KNOW WHAT YOU ARE DOING. If you already have a DSA key from PGP 5 (they call them DH/ElGamal) you can simply copy the pgp keyrings over the GnuPG keyrings after @@ -459,41 +467,15 @@ detailed information about the errors. - Esoteric commands - ----------------- - - gpg --list-packets datafile - - Use this to list the contents of a data file. If the file is encrypted - you are asked for the passphrase, so that GnuPG is able to look at the - inner structure of a encrypted packet. This command should list all - kinds of rfc2440 messages. - - gpg --list-trustdb + How to Get More Information + --------------------------- - List the contents of the trust DB in a human readable format - - gpg --list-trustdb <usernames> - - List the tree of certificates for the given usernames - - gpg --list-trust-path username - - List the possible trust paths for the given username. The length - of such a trust path is limited by the option --max-cert-depth - which defaults to 5. - - For more options/commands see the man page or use "gpg --help". - - - Other Notes - ----------- - - The primary FTP site is "ftp://ftp.gnupg.org/pub/gcrypt/" The primary WWW page is "http://www.gnupg.org" + The primary FTP site is "ftp://ftp.gnupg.org/pub/gcrypt/" See http://www.gnupg.org/mirrors.html for a list of FTP mirrors - and use them if possible. + and use them if possible. You may also find GnuPG mirrored on + some of the regular GNU mirrors. We have some mailing lists dedicated to GnuPG: @@ -515,19 +497,22 @@ Please direct bug reports to <gnupg-bugs@gnu.org> or post them direct to the mailing list <gnupg-devel@gnupg.org>. + Please direct questions about GnuPG to the users mailing list or - one of the pgp newsgroups to give me more time to improve - GnuPG. Commercial support for GnuPG is also available; please - see the GNU service directory or search other resources. + one of the pgp newsgroups; please do not direct questions to one + of the authors directly as we are busy working on improvements + and bug fixes. Both mailing lists are watched by the authors + and we try to answer questions when time allows us to do so. - Have fun and remember: Echelon is looking at you kid. + Commercial grade support for GnuPG is available; please see + the GNU service directory or search other resources. -----BEGIN PGP SIGNATURE----- -Version: GnuPG v0.9.10 (GNU/Linux) +Version: GnuPG v0.9.11 (GNU/Linux) Comment: For info see http://www.gnupg.org -iQB1AwUBN86L1h0Z9MEMmFelAQFQlQL/S5jDPpDFI3wDG/soA/qMTR79YX1IXDz9 -Izin49GkPHElRCoNbT3r3+T6V+lNtrZpah6JBR30//yo1OGUyoJ88yn3KC0JdtUq -NgJzX3yYUXD+Ojer+WHEL+O8D8qkZrAX -=wiUu +iQB1AwUBN9QAwB0Z9MEMmFelAQG0XwMAqyH3UR0Jk+dm2ZkVoTqckGqmMMt5IdBN +MlG4g3dau5De8XXHvbQ45cUpU4CC0MOlEuKDp+CKOc+xbzczdH35qYt/5XKmVWS8 +JwTvuKKCZ/95JRMk0ZMRueQduH7tSijZ +=MefQ -----END PGP SIGNATURE----- @@ -17,6 +17,7 @@ Christian von Roques roques@pond.sub.org Christopher Oliver oliver@fritz.traverse.net Christian Recktenwald chris@citecs.de Daniel Eisenbud eisenbud@cs.swarthmore.edu +Daniel Koenig dan@mail.isis.de David Ellement ellement@sdd.hp.com Detlef Lannert lannert@lannert.rz.uni-duesseldorf.de Dirk Lattermann dlatt@t-online.de @@ -56,6 +57,7 @@ Mark Adler madler@alumni.caltech.edu Mark Elbrecht snowball3@bigfoot.com Markus Friedl Markus.Friedl@informatik.uni-erlangen.de Martin Kahlert martin.kahlert@provi.de +Martin Hamilton Martin Schulte schulte@thp.uni-koeln.de Matthew Skala mskala@ansuz.sooke.bc.ca Max Valianskiy maxcom@maxcom.ml.org @@ -66,6 +68,7 @@ NIIBE Yutaka gniibe@chroot.org Niklas Hernaeus Nimrod Zimerman zimerman@forfree.at N J Doye nic@niss.ac.uk +Oliver Haakert haakert@hsp.de Oskari Jääskeläinen f33003a@cc.hut.fi Paul D. Smith psmith@baynetworks.com Philippe Laliberte arsphl@oeil.qc.ca @@ -94,6 +94,9 @@ #undef USE_CAPABILITIES +/* Some systems have mkdir that takes a single argument. */ +#undef MKDIR_TAKES_ONE_ARG + @BOTTOM@ diff --git a/acinclude.m4 b/acinclude.m4 index 5b00dc0b..aa721ea8 100644 --- a/acinclude.m4 +++ b/acinclude.m4 @@ -617,5 +617,26 @@ if test x$ac_cv_sys_symbol_underscore = xyes; then fi ]) +dnl Stolen from gcc +dnl Define MKDIR_TAKES_ONE_ARG if mkdir accepts only one argument instead +dnl of the usual 2. +AC_DEFUN(GNUPG_FUNC_MKDIR_TAKES_ONE_ARG, +[AC_CACHE_CHECK([if mkdir takes one argument], gnupg_cv_mkdir_takes_one_arg, +[AC_TRY_COMPILE([ +#include <sys/types.h> +#ifdef HAVE_SYS_STAT_H +# include <sys/stat.h> +#endif +#ifdef HAVE_UNISTD_H +# include <unistd.h> +#endif +#ifdef HAVE_DIRECT_H +# include <direct.h> +#endif], [mkdir ("foo", 0);], + gnupg_cv_mkdir_takes_one_arg=no, gnupg_cv_mkdir_takes_one_arg=yes)]) +if test $gnupg_cv_mkdir_takes_one_arg = yes ; then + AC_DEFINE(MKDIR_TAKES_ONE_ARG) +fi +]) dnl *-*wedit:notab*-* Please keep this as the last line. diff --git a/cipher/ChangeLog b/cipher/ChangeLog index 6c84bf5a..919a748b 100644 --- a/cipher/ChangeLog +++ b/cipher/ChangeLog @@ -1,3 +1,8 @@ +Mon Sep 6 19:59:08 CEST 1999 Werner Koch <wk@isil.d.shuttle.de> + + + * des.c (selftest): Add some testpattern + Mon Aug 30 20:38:33 CEST 1999 Werner Koch <wk@isil.d.shuttle.de> diff --git a/cipher/des.c b/cipher/des.c index 256e96bc..18bc10a2 100644 --- a/cipher/des.c +++ b/cipher/des.c @@ -826,6 +826,75 @@ selftest (void) return "TRIPLE-DES test failed."; } + /* + * More Triple-DES test. These are testvectors as used by SSLeay, + * thanks to Jeroen C. van Gelderen. + */ + { struct { byte key[24], byte plain[8], byte cipher[8] } testdata[] = { + { { 0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x01, + 0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x01, + 0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x01 }, + { 0x95,0xF8,0xA5,0xE5,0xDD,0x31,0xD9,0x00 }, + { 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00 } + }, + + { { 0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x01, + 0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x01, + 0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x01 }, + { 0x9D,0x64,0x55,0x5A,0x9A,0x10,0xB8,0x52, }, + { 0x00,0x00,0x00,0x10,0x00,0x00,0x00,0x00 } + }, + { { 0x38,0x49,0x67,0x4C,0x26,0x02,0x31,0x9E, + 0x38,0x49,0x67,0x4C,0x26,0x02,0x31,0x9E, + 0x38,0x49,0x67,0x4C,0x26,0x02,0x31,0x9E }, + { 0x51,0x45,0x4B,0x58,0x2D,0xDF,0x44,0x0A }, + { 0x71,0x78,0x87,0x6E,0x01,0xF1,0x9B,0x2A } + }, + { { 0x04,0xB9,0x15,0xBA,0x43,0xFE,0xB5,0xB6, + 0x04,0xB9,0x15,0xBA,0x43,0xFE,0xB5,0xB6, + 0x04,0xB9,0x15,0xBA,0x43,0xFE,0xB5,0xB6 }, + { 0x42,0xFD,0x44,0x30,0x59,0x57,0x7F,0xA2 }, + { 0xAF,0x37,0xFB,0x42,0x1F,0x8C,0x40,0x95 } + }, + { { 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF, + 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF, + 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF }, + { 0x73,0x6F,0x6D,0x65,0x64,0x61,0x74,0x61 }, + { 0x3D,0x12,0x4F,0xE2,0x19,0x8B,0xA3,0x18 } + }, + { { 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF, + 0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55, + 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF }, + { 0x73,0x6F,0x6D,0x65,0x64,0x61,0x74,0x61 }, + { 0xFB,0xAB,0xA1,0xFF,0x9D,0x05,0xE9,0xB1 } + }, + { { 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF, + 0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55, + 0xFE,0xDC,0xBA,0x98,0x76,0x54,0x32,0x10 }, + { 0x73,0x6F,0x6D,0x65,0x64,0x61,0x74,0x61 }, + { 0x18,0xd7,0x48,0xe5,0x63,0x62,0x05,0x72 } + }, + { { 0x03,0x52,0x02,0x07,0x67,0x20,0x82,0x17, + 0x86,0x02,0x87,0x66,0x59,0x08,0x21,0x98, + 0x64,0x05,0x6A,0xBD,0xFE,0xA9,0x34,0x57 }, + { 0x73,0x71,0x75,0x69,0x67,0x67,0x6C,0x65 }, + { 0xc0,0x7d,0x2a,0x0f,0xa5,0x66,0xfa,0x30 } + }, + { { 0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x01, + 0x80,0x01,0x01,0x01,0x01,0x01,0x01,0x01, + 0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x02 }, + { 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 }, + { 0xe6,0xe6,0xdd,0x5b,0x7e,0x72,0x29,0x74 } + }, + { { 0x10,0x46,0x10,0x34,0x89,0x98,0x80,0x20, + 0x91,0x07,0xD0,0x15,0x89,0x19,0x01,0x01, + 0x19,0x07,0x92,0x10,0x98,0x1A,0x01,0x01 }, + { 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 }, + { 0xe1,0xef,0x62,0xc3,0x32,0xfe,0x82,0x5b } + } + }; + /* fixme: do the test */ + } /* * Check the weak key detection. We simply assume the table with diff --git a/configure.in b/configure.in index e72e7be4..5656adb6 100644 --- a/configure.in +++ b/configure.in @@ -406,6 +406,7 @@ AC_CHECK_FUNCS(memmove gettimeofday getrusage gethrtime setrlimit) AC_CHECK_FUNCS(memicmp atexit raise getpagesize strftime nl_langinfo) GNUPG_CHECK_MLOCK +GNUPG_FUNC_MKDIR_TAKES_ONE_ARG dnl dnl Check whether we can use Linux capabilities as requested @@ -706,6 +707,7 @@ mpi/Makefile cipher/Makefile g10/Makefile doc/Makefile +doc/gph/Makefile tools/Makefile zlib/Makefile checks/Makefile diff --git a/doc/Makefile.am b/doc/Makefile.am index c5bdf3c9..ae5cdb50 100644 --- a/doc/Makefile.am +++ b/doc/Makefile.am @@ -1,5 +1,7 @@ ## Process this file with automake to create Makefile.in +SUBDIRS = gph + EXTRA_DIST = DETAILS gpg.sgml gpg.1 FAQ HACKING OpenPGP man_MANS = gpg.1 @@ -15,21 +17,13 @@ else endif -%.txt : %.sgml - sgml2txt -c latin $* +%.dvi: %.sgml + db2dvi $< -%.html : %.sgml - sgml2html -c latin $* +%.ps: %.dvi + dvips -o $@ $< -%.dvi : %.sgml - -rm $*.sgml.tmp - mv $*.sgml $*.sgml.tmp - sed -e '/<!entity/ s/"IGNORE">/"INCLUDE">/' $*.sgml.tmp >$*.sgml - sgml2latex -b -l deutsch -c latin $* ; mv $*.sgml.tmp $*.sgml +%/%.html: %.sgml + -db2html $< -%.ps : %.sgml - -rm $*.sgml.tmp - mv $*.sgml $*.sgml.tmp - sed -e '/<!entity/ s/"IGNORE">/"INCLUDE">/' $*.sgml.tmp >$*.sgml - sgml2latex -b -l deutsch -c latin -o ps $* ; mv $*.sgml.tmp $*.sgml |