openpgpjs

mirror of https://github.com/openpgpjs/openpgpjs.git synced 2025-03-30 15:08:32 +00:00

History

Add config.rejectCurves and prevent generating keys using blacklisted algorithms (#1395 )

Breaking changes:
- throw error on key generation if the requested public key algorithm is
included in `config.rejectPublicKeyAlgorithms`;
- add `config.rejectCurves` to blacklist a set of ECC curves, to prevent keys
using those curves from being generated, or being used to
encrypt/decrypt/sign/verify messages.
By default, `config.rejectCurves` includes the brainpool curves
(`brainpoolP256r1`, `brainpoolP384r1`, `brainpoolP512r1`) and the Bitcoin curve
(`secp256k1`). This is because it's unclear whether these curves will be
standardised[1], and we prefer to blacklist them already, rather than introduce
a breaking change after release.

[1] https://gitlab.com/openpgp-wg/rfc4880bis/-/merge_requests/47#note_634199141

2021-08-19 17:58:16 +02:00

crypto

Add config.rejectCurves and prevent generating keys using blacklisted algorithms (#1395 )

2021-08-19 17:58:16 +02:00

general

Add config.rejectCurves and prevent generating keys using blacklisted algorithms (#1395 )

2021-08-19 17:58:16 +02:00

security

Replace armor option with format in openpgp.encrypt, sign and encryptSessionKey (#1354 )

2021-07-19 18:12:42 +02:00

typescript

Replace armor option with format in openpgp.encrypt, sign and encryptSessionKey (#1354 )