Required patches for the OpenPG card v2.0

Patrick Brunschwig patrick at mozilla-enigmail.org
Sat Jul 18 18:36:05 CEST 2009


Werner Koch wrote:
> Unfortunately I realized too late that 2.0.12 still had bugs with the
> new OpenPGP card[1].  Without actual hardware testing stuff is a bit
> hard; I had 2 engineering samples during development and we swapped card
> back and forth to squash the bugs in the card's firmware while also
> hacking gnupg.  Thus some things got not tested for 2.0.12.
> 
> Find attached 2 patches against GnuPG 2.0.12 to fix the card problem as
> well as an unlrealted Windows-only problem.  These patches are already
> in the Gpg4win 2.0.0rc1 installer currently being copied to the servers.
> 
> GnuPG 1.4 does not yet support the v2 cards.  I plan to backport the
> code from 2.0 in the next week and then it should not take too long to
> get 1.4.10 out.  If you don't want to wait: gpg2 is the perfect version
> for the desktop or laptop ;-)

Hello Werner,

I finally found the time to test the latest version of gpg2 (incl. your
patches).

I noticed an important difference between gpg 1.4.9 and 2.0.12: when I
have the wrong card inserted (e.g. for decryption), gpg 1.4.9 responds
with these status messages:

[GNUPG:] ENC_TO 12A7990DF2541241 1 0
[GNUPG:] CARDCTRL 3 D2760001240101010001000000460000
[GNUPG:] CARDCTRL 1 D2760001240102000005000000700000
[GNUPG:] SC_OP_FAILURE
[GNUPG:] BEGIN_DECRYPTION
[GNUPG:] DECRYPTION_FAILED


Version 2.0.12+ only responds with this:
[GNUPG:] ENC_TO 12A7990DF2541241 1 0
[GNUPG:] BEGIN_DECRYPTION
[GNUPG:] DECRYPTION_FAILED
[GNUPG:] END_DECRYPTION


Could you add the missing status messages to gpg2 ?

Thanks,
Patrick




More information about the Gnupg-devel mailing list