rpm/dkgpg
SHA256
1
0
Fork 0
forked from pool/dkgpg
Code Pull Requests Activity
f9a74e2edf
dkgpg/dkgpg.spec

77 lines
2.8 KiB
RPMSpec
Raw Normal View History

Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
#
# spec file for package dkgpg
#
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
Accepting request 648404 from home:kbabioch:branches:security:privacy - Update to version 1.0.9 This release improves the possibilities of DKGPG further. With the new programs dkg-adduid and dkg-revuid an user ID can be added and revoked, respectively. The program dkg-revoke now supports a human-readable reason for revocation (by option "-R") and dkg-decrypt verifies an included signature according to a given key ring (option "-k"). Last but not least, by the program dkg-addrevoker an external revocation key can be specified. OBS-URL: https://build.opensuse.org/request/show/648404 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=12
2018-11-12 10:13:06 +01:00
# Please submit bugfixes or comments via https://bugs.opensuse.org/
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
#
Name: dkgpg
Accepting request 648404 from home:kbabioch:branches:security:privacy - Update to version 1.0.9 This release improves the possibilities of DKGPG further. With the new programs dkg-adduid and dkg-revuid an user ID can be added and revoked, respectively. The program dkg-revoke now supports a human-readable reason for revocation (by option "-R") and dkg-decrypt verifies an included signature according to a given key ring (option "-k"). Last but not least, by the program dkg-addrevoker an external revocation key can be specified. OBS-URL: https://build.opensuse.org/request/show/648404 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=12
2018-11-12 10:13:06 +01:00
Version: 1.0.9
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
Release: 0
Summary: Distributed Key Generation (DKG) and Threshold Cryptography for OpenPGP
Accepting request 621610 from home:kbabioch:branches:security:privacy - Update to 1.0.7: * Small improvments due to the new OpenPGP structures from libTMCG * "-k" option has been added to further programs * OpenPGP cleartext signatures can be generated with the "-t" option * Output of potentially malicious user IDs has been sanitized in dkg-keycheck, dkg-keyinfo, and dkg-keysign - Applied spec-cleaner OBS-URL: https://build.opensuse.org/request/show/621610 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=8
2018-07-09 07:54:33 +02:00
License: GPL-2.0-or-later
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
Group: Productivity/Security
Accepting request 621610 from home:kbabioch:branches:security:privacy - Update to 1.0.7: * Small improvments due to the new OpenPGP structures from libTMCG * "-k" option has been added to further programs * OpenPGP cleartext signatures can be generated with the "-t" option * Output of potentially malicious user IDs has been sanitized in dkg-keycheck, dkg-keyinfo, and dkg-keysign - Applied spec-cleaner OBS-URL: https://build.opensuse.org/request/show/621610 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=8
2018-07-09 07:54:33 +02:00
URL: https://www.nongnu.org/dkgpg/
Accepting request 574409 from home:kbabioch:branches:security:privacy - Update to version 1.0.5 * added secure memory allocation from libgcrypt for some parts * dkg-verify: added options "-f" and "-t" for a validity period * added simple initalization procedure for memory locking * added basic check on signature strength in parse_signature() * added some basic checks on key strength in parse_public_key() * added check for revocation signatures in parse_public_key() * dkg-encrypt: added option "-z" for improved privacy (zero key ID) * dkg-verify: added validity checks on key and signature * dkg-keycheck: added ROCA vulnerability detector (Infineon RSALib) * added option "-U" for dkg-keysign (policy URI) * added option "-r" for dkg-keysign (revocation signature) * added option "-r" for dkg-keycheck (support for RSA keys) * added program dkg-keysign for creating certification signatures * dkg-decrypt: removed support for not integrity protected messages * dkg-keycheck: added test for small/same k in DSA signatures * dkg-refresh: added cache for very strong randomness - Use https instead of http OBS-URL: https://build.opensuse.org/request/show/574409 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=2
2018-02-08 23:16:08 +01:00
Source: https://download.savannah.gnu.org/releases/dkgpg/%{name}-%{version}.tar.gz
Source2: https://download.savannah.gnu.org/releases/dkgpg/%{name}-%{version}.tar.gz.sig
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
Source3: %{name}.keyring
BuildRequires: gcc-c++
BuildRequires: gmp-devel >= 4.2
Accepting request 648404 from home:kbabioch:branches:security:privacy - Update to version 1.0.9 This release improves the possibilities of DKGPG further. With the new programs dkg-adduid and dkg-revuid an user ID can be added and revoked, respectively. The program dkg-revoke now supports a human-readable reason for revocation (by option "-R") and dkg-decrypt verifies an included signature according to a given key ring (option "-k"). Last but not least, by the program dkg-addrevoker an external revocation key can be specified. OBS-URL: https://build.opensuse.org/request/show/648404 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=12
2018-11-12 10:13:06 +01:00
BuildRequires: libTMCG-devel >= 1.3.15
Accepting request 635471 from home:kbabioch:branches:security:privacy - Update to version 1.0.8: First of all, passive support for ECDSA, ECDH, and EdDSA (cf. RFC 6637 and Werner Koch's draft RFC 4880bis) has been added by relying on the most recent version of LibTMCG. The threshold signature scheme and the threshold encryption are still limited to finite field cryptography (i.e. DSA and ElGamal). Moreover, the programs generate and recognize a few other new OpenPGP features (e.g. issuer fingerprint subpackets) from RFC 4880bis. Compressed messages are now decompressed by the program dkg-decrypt using zlib Compression Library (and optionally by library routines from libbzip2). This completes DKGPG's compatibility with other OpenPGP software, however, the prefered compression algorithm (i.e. "no compression") in self-signatures of generated keys is kept for now. Support for symmetric-key decryption by dkg-decrypt has been added too. The program dkg-verify now reads the signature from a file, if option "-s" is used. To keep track of later protocol changes, all interactive programs include a version identifier in their common ID of the reliable broadcast channel. Thus programs from previous releases will not communicate with those of this release. With the new programs dkg-timestamp and dkg-timestamp-verify a OpenPGP timestamp signature can be generated and verified, respectively. Last but not least, by the new option "-y" some programs (dkg-generate, dkg-decrypt, dkg-sign, dkg-keysign, and dkg-timestamp) will work with regular OpenPGP keys too. The README file contains a configuration sample showing how to replace classic PGP by DKGPG in the famous mail user agent mutt based on this option. Please note that this feature is experimental and semantics may be changed later. - Added new build requirements: * zlib * bzip2 OBS-URL: https://build.opensuse.org/request/show/635471 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=10
2018-09-21 11:20:12 +02:00
BuildRequires: libbz2-devel
Accepting request 621610 from home:kbabioch:branches:security:privacy - Update to 1.0.7: * Small improvments due to the new OpenPGP structures from libTMCG * "-k" option has been added to further programs * OpenPGP cleartext signatures can be generated with the "-t" option * Output of potentially malicious user IDs has been sanitized in dkg-keycheck, dkg-keyinfo, and dkg-keysign - Applied spec-cleaner OBS-URL: https://build.opensuse.org/request/show/621610 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=8
2018-07-09 07:54:33 +02:00
BuildRequires: libgcrypt-devel >= 1.6
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
BuildRequires: libgpg-error-devel >= 1.12
Accepting request 635471 from home:kbabioch:branches:security:privacy - Update to version 1.0.8: First of all, passive support for ECDSA, ECDH, and EdDSA (cf. RFC 6637 and Werner Koch's draft RFC 4880bis) has been added by relying on the most recent version of LibTMCG. The threshold signature scheme and the threshold encryption are still limited to finite field cryptography (i.e. DSA and ElGamal). Moreover, the programs generate and recognize a few other new OpenPGP features (e.g. issuer fingerprint subpackets) from RFC 4880bis. Compressed messages are now decompressed by the program dkg-decrypt using zlib Compression Library (and optionally by library routines from libbzip2). This completes DKGPG's compatibility with other OpenPGP software, however, the prefered compression algorithm (i.e. "no compression") in self-signatures of generated keys is kept for now. Support for symmetric-key decryption by dkg-decrypt has been added too. The program dkg-verify now reads the signature from a file, if option "-s" is used. To keep track of later protocol changes, all interactive programs include a version identifier in their common ID of the reliable broadcast channel. Thus programs from previous releases will not communicate with those of this release. With the new programs dkg-timestamp and dkg-timestamp-verify a OpenPGP timestamp signature can be generated and verified, respectively. Last but not least, by the new option "-y" some programs (dkg-generate, dkg-decrypt, dkg-sign, dkg-keysign, and dkg-timestamp) will work with regular OpenPGP keys too. The README file contains a configuration sample showing how to replace classic PGP by DKGPG in the famous mail user agent mutt based on this option. Please note that this feature is experimental and semantics may be changed later. - Added new build requirements: * zlib * bzip2 OBS-URL: https://build.opensuse.org/request/show/635471 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=10
2018-09-21 11:20:12 +02:00
BuildRequires: zlib-devel
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
%description
Accepting request 575212 from home:jengelh:branches:security:privacy - Trim/compact long description for size, and wrap at 70 cols. OBS-URL: https://build.opensuse.org/request/show/575212 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=3
2018-02-11 12:19:02 +01:00
The Distributed Privacy Guard (DKGPG) implements Distributed Key
Generation (DKG) and Threshold Cryptography for OpenPGP. The
generated public keys are RFC4880 compatible and can be used by e.g.
GnuPG. The main purpose of this software is distributing power among
multiple parties, eliminating single points of failure, and
increasing the difficulty of side-channel attacks on private key
material.
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
Accepting request 575212 from home:jengelh:branches:security:privacy - Trim/compact long description for size, and wrap at 70 cols. OBS-URL: https://build.opensuse.org/request/show/575212 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=3
2018-02-11 12:19:02 +01:00
DKGPG consists of a number of command-line programs. The current implementation
is in experimental state and should NOT be used in production environments.
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
Accepting request 575212 from home:jengelh:branches:security:privacy - Trim/compact long description for size, and wrap at 70 cols. OBS-URL: https://build.opensuse.org/request/show/575212 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=3
2018-02-11 12:19:02 +01:00
A shared private key and a common public key (currently only
DSA/ElGamal) are generated. Further interactive protocols perform the
private operations like decryption and signing of files, provided
that a previously defined threshold of parties/devices take part in
the distributed computation. Due to the interactiveness of the
protocols, a lot of messages between participating parties have to be
exchanged in a secure way. GNUnet's mesh-routed CADET srvice is used
to establish private and broadcast channels for this message
exchange. A TCP/IP-based service is included as an alternative. It
may be combined with torsocks and NAT of a local hidden service.
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
%prep
%setup -q
%build
%configure
make %{?_smp_mflags}
%install
%make_install
%files
Accepting request 621610 from home:kbabioch:branches:security:privacy - Update to 1.0.7: * Small improvments due to the new OpenPGP structures from libTMCG * "-k" option has been added to further programs * OpenPGP cleartext signatures can be generated with the "-t" option * Output of potentially malicious user IDs has been sanitized in dkg-keycheck, dkg-keyinfo, and dkg-keysign - Applied spec-cleaner OBS-URL: https://build.opensuse.org/request/show/621610 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=8
2018-07-09 07:54:33 +02:00
%license COPYING
%doc AUTHORS BUGS ChangeLog NEWS README TODO
Accepting request 565810 from home:kbabioch New package, needs libTMCG from games. OBS-URL: https://build.opensuse.org/request/show/565810 OBS-URL: https://build.opensuse.org/package/show/security:privacy/dkgpg?expand=0&rev=1
2018-01-24 21:35:52 +01:00
%{_bindir}/dkg-*
%{_mandir}/man1/*%{ext_man}
%changelog
Copy Permalink