crypto/openpgp
KB Sriram c10c31b5e9 x/crypto/openpgp: cross-signature validation for signing subkeys.
Section 11.1 of RFC4880 requires that binding signatures on
signing subkeys contain a valid embedded signature that cross-certifies
the primary key. This is to avoid the weakness described at
https://www.gnupg.org/faq/subkey-cross-certify.html

Fixes #10740

Change-Id: Ibe039662497832945957b001a83080ba29213703
Reviewed-on: https://go-review.googlesource.com/9799
Reviewed-by: Adam Langley <agl@golang.org>
2015-05-31 18:57:27 +00:00
..
armor crypto: add import comments. 2014-12-09 23:26:36 +00:00
clearsign crypto: add import comments. 2014-12-09 23:26:36 +00:00
elgamal crypto: add import comments. 2014-12-09 23:26:36 +00:00
errors crypto: add import comments. 2014-12-09 23:26:36 +00:00
packet x/crypto/openpgp: cross-signature validation for signing subkeys. 2015-05-31 18:57:27 +00:00
s2k crypto: add import comments. 2014-12-09 23:26:36 +00:00
canonical_text.go go.crypto: initial code 2012-01-25 15:31:12 -05:00
canonical_text_test.go go.crypto: initial code 2012-01-25 15:31:12 -05:00
keys.go crypto/openpgp: select newest valid encryption subkey 2015-05-31 17:36:15 +00:00
keys_test.go x/crypto/openpgp: cross-signature validation for signing subkeys. 2015-05-31 18:57:27 +00:00
read.go x/crypto/openpgp: Limit packet recursion depth. 2015-05-08 01:16:24 +00:00
read_test.go x/crypto/openpgp: Limit packet recursion depth. 2015-05-08 01:16:24 +00:00
write.go go.crypto: use golang.org/x/... import paths 2014-11-10 08:50:25 +11:00
write_test.go go.crypto/openpgp: don't select expired keys. 2013-07-22 18:23:28 -04:00