wk at isil
Jan 7, 1998, 4:00 AM
Post #1 of 1
(250 views)
Permalink
|
Hi,
while porting the G10 to HPUX I detected that my blowfish code was not
okay. It was secure, but input bytes were swapped. By looking at
Bruce Schneier's original News posting I found some test vectors to
test my implementation. The new code works on intel but I had no chance to
check it on a big-endian machine like a HPPA (I have no onlline access to
such a machine); anyway the new code gives correct results and should be
used as soon as possible.
The bad news is, that if you have protected secret keys, you must do some
addional work:
1) Get the new release 0.1.1 (or the diff) from fpt.guug.de/pub/gcrypt
2) un-tar it and replace the file cipher/blowfish.c by the one from
an earlier release (kepp an backup of the new one)
3) Run ./configure and make
4) For every secret key you have do this:
4a) "g10/g10 --change-passphrase [<user-id>]"
4b) Unlock your key and enter an empty string as the new passphrase
4c) Answer yes to store your key without a passphrase
4d) continue with your next key
5) restore the blowfish.c
6) do a make
7) For every secret key you have do this:
7a) "g10/g10 --change-passphrase [<user-id>]"
7b) Enter a new passphrase
7c) continue with your next key
8) ready
If you have any encrypted data proceed likewise.
I have added support for big endian boxes and the it worked yesterday on
a HP (with HPUX 9); I couldn't test the new blowfish code; please try it
by using a keypair generated on Linux and try to sign something on a HP
(Blowfish is used to encrypt your secret key).
--
Werner Koch, Duesseldorf - werner.koch [at] guug - PGP keyID: 0C9857A5
|
