Add back zlib and zip to preferred compression algos on key generation

To signal support, despite "no compression" being preferred by default,
for security reasons.
This commit is contained in:
larabr 2023-12-08 14:00:22 +01:00
parent e93702bb8d
commit ff4181ad5a
2 changed files with 5 additions and 3 deletions

View File

@ -221,7 +221,9 @@ async function wrapKeyObject(secretKeyPacket, secretSubkeyPackets, options, conf
enums.hash.sha3_512
], config.preferredHashAlgorithm);
signatureProperties.preferredCompressionAlgorithms = createPreferredAlgos([
enums.compression.uncompressed
enums.compression.uncompressed,
enums.compression.zlib,
enums.compression.zip
], config.preferredCompressionAlgorithm);
// integrity protection always enabled
signatureProperties.features = [0];

View File

@ -2264,7 +2264,7 @@ function versionSpecificTests() {
const hash = openpgp.enums.hash;
expect(selfSignature.preferredHashAlgorithms).to.eql([hash.sha256, hash.sha512, hash.sha3_256, hash.sha3_512]);
const compr = openpgp.enums.compression;
expect(selfSignature.preferredCompressionAlgorithms).to.eql([compr.uncompressed]);
expect(selfSignature.preferredCompressionAlgorithms).to.eql([compr.uncompressed, compr.zlib, compr.zip]);
let expectedFeatures = 0x01; // SEIPDv1
if (openpgp.config.aeadProtect) {
@ -2319,7 +2319,7 @@ function versionSpecificTests() {
const hash = openpgp.enums.hash;
expect(selfSignature.preferredHashAlgorithms).to.eql([hash.sha224, hash.sha256, hash.sha512, hash.sha3_256, hash.sha3_512]);
const compr = openpgp.enums.compression;
expect(selfSignature.preferredCompressionAlgorithms).to.eql([compr.zlib, compr.uncompressed]);
expect(selfSignature.preferredCompressionAlgorithms).to.eql([compr.zlib, compr.uncompressed, compr.zip]);
let expectedFeatures = 0x01; // SEIPDv1
if (openpgp.config.aeadProtect) {