[Bug 1462648] Re: gnupg2 in Trusty is incompatible with ECC keys

Dimitri John Ledkov launchpad at surgut.co.uk
Sun Sep 4 20:58:58 UTC 2016


Indeed this affects trusty only. It may be of interest to backport gnupg
2.1 to trusty, however I do not think it will achieve the desired goal,
as most software in trusty is not compatible with agent-only/keybox
based gnupg 2.1.

** Also affects: gnupg2 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Changed in: gnupg2 (Ubuntu)
       Status: Confirmed => Fix Released

** Changed in: gnupg2 (Ubuntu Trusty)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnupg2 in Ubuntu.
https://bugs.launchpad.net/bugs/1462648

Title:
  gnupg2 in Trusty  is incompatible with ECC keys

Status in gnupg2 package in Ubuntu:
  Fix Released
Status in gnupg2 source package in Trusty:
  Confirmed

Bug description:
  Using  Ubuntu 14.04.2 LTS  with gnupg2  2.0.22-3ubuntu1.3 (trusty
  updates)

  As a result of an answer to a question placed on
  answers.launchpad.net, I am placing this bug report here.

  I expect to be able to check signatures on all signed emails and to
  decrypt all encrypted mails and other documents sent to me.

  An increasing number of emails cannot be verified for signature and encrypted emails and other documents cannot be decrypted using Ubuntu 1404 LTS.  The reason is linked with the release by gnupg.org  in 2014 of the 'Modern' series of gnupg2  2.1.xx.  
    
  Amongst many other improvements, this modern series has introduced elliptic curve  (ECC) public key  encryption  defined in RFC-6637.  An increasing number of people are now using these keys and they  are incompatible with gnupg2 2.0.xx (and also with gnupg1.4.xx).   So a gulf exists now between users of the new 'modern' gnupg2 2.1.xx and users of older versions and this gulf is widening each week.

  Gnupg2 2.1.xx cannot co-exist on a computer with the older 2.0.xx
  series so those who are sending out documents signed or encrypted with
  ECC cannot revert easily to the 2.0.xx series if their recipient
  cannot handle ECC.  Other client applications like enigmail have
  announced the forthcoming abandon of support for 1.4

  The new modern series of gnupg2 is now at release 2.1.4 and is in
  successful operation in the experimental branch of Debian.

  It appears increasingly important that Ubuntu users should have
  support for gnupg2 'Modern' 2.1.xx and perhaps further development of
  gnupg2 packages should concentrate on this modern series.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnupg2/+bug/1462648/+subscriptions



More information about the foundations-bugs mailing list