PKCS#12 password length limit in sm/minip12.c

Werner Koch wk at gnupg.org
Tue Nov 9 08:31:54 CET 2021


On Sun,  7 Nov 2021 14:10, Rainer Perske said:

> Before I file a bug report: Is there any good reason for limiting the 
> password length for PKCS#12 files to 63/2 = 31 bytes in line 354 of 
> "sm/minip12.c"?

Sorry, I can't remember why I write it this way 18 years ago.  Maybe we
had different specs back then or the limit was a shortcut to not
implement the whole thing.  But in the latter case there should have
been a note in the code.

To tell more, I would need to revisit the specs.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-devel/attachments/20211109/1534bb3a/attachment.sig>


More information about the Gnupg-devel mailing list