rpm  5.4.15
Data Structures | Macros | Typedefs | Enumerations | Functions | Variables
rpmpgp.h File Reference

OpenPGP constants and structures from RFC-2440. More...

#include <string.h>
#include <popt.h>
#include <rpmiotypes.h>
#include <yarn.h>
Include dependency graph for rpmpgp.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures

struct  pgpValTbl_s
 
struct  pgpPktPubkey_s
 5.1. More...
 
struct  pgpPktSigV3_s
 5.2.2. More...
 
struct  pgpPktSigV4_s
 5.2.3. More...
 
union  pgpPktSig_u
 5.2. More...
 
struct  pgpPktSymkey_s
 5.3. More...
 
struct  pgpPktOnepass_s
 5.4. More...
 
struct  pgpPktKeyV3_s
 5.5.1. More...
 
struct  pgpPktKeyV4_s
 The version 4 format is similar to the version 3 format except for the absence of a validity period. More...
 
union  pgpPktKey_u
 5.5.3. More...
 
struct  pgpPktCdata_s
 5.6. More...
 
struct  pgpPktEdata_s
 5.7. More...
 
struct  pgpPktLdata_s
 5.8. More...
 
struct  pgpPktTrust_s
 5.10. More...
 
struct  pgpPktUid_s
 5.11. More...
 
struct  pgpImplVecs_s
 

Macros

#define PGPARMOR_ERROR   PGPARMOR_ERR_NO_BEGIN_PGP
 
#define pgpDigUnlink(_dig)   ((pgpDig)rpmioUnlinkPoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__))
 
#define pgpDigLink(_dig)   ((pgpDig)rpmioLinkPoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__))
 
#define pgpDigFree(_dig)   ((pgpDig)rpmioFreePoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__))
 
#define CRC24_INIT   0xb704ce
 
#define CRC24_POLY   0x1864cfb
 

Typedefs

typedef const struct pgpValTbl_spgpValTbl
 
typedef enum pgpTag_e pgpTag
 4.3. More...
 
typedef struct pgpPktPubkey_s pgpPktPubkey
 5.1. More...
 
typedef enum pgpSigType_e pgpSigType
 5.2.1. More...
 
typedef enum pgpPubkeyAlgo_e pgpPubkeyAlgo
 9.1. More...
 
typedef enum pgpCompressAlgo_e pgpCompressAlgo
 9.3. More...
 
typedef struct pgpPktSigV3_spgpPktSigV3
 5.2.2. More...
 
typedef struct pgpPktSigV4_spgpPktSigV4
 5.2.3. More...
 
typedef enum pgpSubType_e pgpSubType
 5.2.3.1. More...
 
typedef union pgpPktSig_upgpPktSig
 5.2. More...
 
typedef struct pgpPktSymkey_s pgpPktSymkey
 5.3. More...
 
typedef struct pgpPktOnepass_spgpPktOnepass
 5.4. More...
 
typedef struct pgpPktKeyV3_spgpPktKeyV3
 5.5.1. More...
 
typedef struct pgpPktKeyV4_spgpPktKeyV4
 The version 4 format is similar to the version 3 format except for the absence of a validity period. More...
 
typedef union pgpPktKey_u pgpPktKey
 5.5.3. More...
 
typedef struct pgpPktCdata_s pgpPktCdata
 5.6. More...
 
typedef struct pgpPktEdata_s pgpPktEdata
 5.7. More...
 
typedef struct pgpPktLdata_s pgpPktLdata
 5.8. More...
 
typedef struct pgpPktTrust_s pgpPktTrust
 5.10. More...
 
typedef struct pgpPktUid_s pgpPktUid
 5.11. More...
 
typedef enum pgpArmor_e pgpArmor
 
typedef enum pgpArmorKey_e pgpArmorKey
 
typedef int(* pgpImplSet_t )(DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp)
 
typedef int(* pgpImplErrChk_t )(pgpDig dig, const char *msg, int rc, unsigned expected)
 
typedef int(* pgpImplAvailable_t )(pgpDig dig, int algo)
 
typedef int(* pgpImplGenerate_t )(pgpDig dig)
 
typedef int(* pgpImplSign_t )(pgpDig dig)
 
typedef int(* pgpImplVerify_t )(pgpDig dig)
 
typedef int(* pgpImplMpiItem_t )(const char *pre, pgpDig dig, int itemno, const rpmuint8_t *p, const rpmuint8_t *pend)
 
typedef void(* pgpImplClean_t )(void *impl)
 
typedef void *(* pgpImplFree_t )(void *impl)
 
typedef void *(* pgpImplInit_t )(void)
 
typedef struct pgpImplVecs_s pgpImplVecs_t
 

Enumerations

enum  pgpTag_e {
  PGPTAG_RESERVED = 0, PGPTAG_PUBLIC_SESSION_KEY = 1, PGPTAG_SIGNATURE = 2, PGPTAG_SYMMETRIC_SESSION_KEY = 3,
  PGPTAG_ONEPASS_SIGNATURE = 4, PGPTAG_SECRET_KEY = 5, PGPTAG_PUBLIC_KEY = 6, PGPTAG_SECRET_SUBKEY = 7,
  PGPTAG_COMPRESSED_DATA = 8, PGPTAG_SYMMETRIC_DATA = 9, PGPTAG_MARKER = 10, PGPTAG_LITERAL_DATA = 11,
  PGPTAG_TRUST = 12, PGPTAG_USER_ID = 13, PGPTAG_PUBLIC_SUBKEY = 14, PGPTAG_COMMENT_OLD = 16,
  PGPTAG_PHOTOID = 17, PGPTAG_ENCRYPTED_MDC = 18, PGPTAG_MDC = 19, PGPTAG_PRIVATE_60 = 60,
  PGPTAG_COMMENT = 61, PGPTAG_PRIVATE_62 = 62, PGPTAG_CONTROL = 63
}
 4.3. More...
 
enum  pgpSigType_e {
  PGPSIGTYPE_BINARY = 0x00, PGPSIGTYPE_TEXT = 0x01, PGPSIGTYPE_STANDALONE = 0x02, PGPSIGTYPE_GENERIC_CERT = 0x10,
  PGPSIGTYPE_PERSONA_CERT = 0x11, PGPSIGTYPE_CASUAL_CERT = 0x12, PGPSIGTYPE_POSITIVE_CERT = 0x13, PGPSIGTYPE_SUBKEY_BINDING = 0x18,
  PGPSIGTYPE_KEY_BINDING = 0x19, PGPSIGTYPE_SIGNED_KEY = 0x1F, PGPSIGTYPE_KEY_REVOKE = 0x20, PGPSIGTYPE_SUBKEY_REVOKE = 0x28,
  PGPSIGTYPE_CERT_REVOKE = 0x30, PGPSIGTYPE_TIMESTAMP = 0x40, PGPSIGTYPE_CONFIRM = 0x50
}
 5.2.1. More...
 
enum  pgpPubkeyAlgo_e {
  PGPPUBKEYALGO_UNKNOWN = 0, PGPPUBKEYALGO_RSA = 1, PGPPUBKEYALGO_RSA_E = 2, PGPPUBKEYALGO_RSA_S = 3,
  PGPPUBKEYALGO_ELGAMAL_E = 16, PGPPUBKEYALGO_DSA = 17, PGPPUBKEYALGO_ECDH = 18, PGPPUBKEYALGO_ECDSA = 19,
  PGPPUBKEYALGO_ELGAMAL = 20, PGPPUBKEYALGO_EDDSA = 105
}
 9.1. More...
 
enum  pgpCompressAlgo_e { PGPCOMPRESSALGO_NONE = 0, PGPCOMPRESSALGO_ZIP = 1, PGPCOMPRESSALGO_ZLIB = 2, PGPCOMPRESSALGO_BZIP2 = 3 }
 9.3. More...
 
enum  pgpSubType_e {
  PGPSUBTYPE_NONE = 0, PGPSUBTYPE_SIG_CREATE_TIME = 2, PGPSUBTYPE_SIG_EXPIRE_TIME = 3, PGPSUBTYPE_EXPORTABLE_CERT = 4,
  PGPSUBTYPE_TRUST_SIG = 5, PGPSUBTYPE_REGEX = 6, PGPSUBTYPE_REVOCABLE = 7, PGPSUBTYPE_KEY_EXPIRE_TIME = 9,
  PGPSUBTYPE_ARR = 10, PGPSUBTYPE_PREFER_SYMKEY = 11, PGPSUBTYPE_REVOKE_KEY = 12, PGPSUBTYPE_ISSUER_KEYID = 16,
  PGPSUBTYPE_NOTATION = 20, PGPSUBTYPE_PREFER_HASH = 21, PGPSUBTYPE_PREFER_COMPRESS = 22, PGPSUBTYPE_KEYSERVER_PREFERS = 23,
  PGPSUBTYPE_PREFER_KEYSERVER = 24, PGPSUBTYPE_PRIMARY_USERID = 25, PGPSUBTYPE_POLICY_URL = 26, PGPSUBTYPE_KEY_FLAGS = 27,
  PGPSUBTYPE_SIGNER_USERID = 28, PGPSUBTYPE_REVOKE_REASON = 29, PGPSUBTYPE_FEATURES = 30, PGPSUBTYPE_SIG_TARGET = 31,
  PGPSUBTYPE_EMBEDDED_SIG = 32, PGPSUBTYPE_INTERNAL_100 = 100, PGPSUBTYPE_INTERNAL_101 = 101, PGPSUBTYPE_INTERNAL_102 = 102,
  PGPSUBTYPE_INTERNAL_103 = 103, PGPSUBTYPE_INTERNAL_104 = 104, PGPSUBTYPE_INTERNAL_105 = 105, PGPSUBTYPE_INTERNAL_106 = 106,
  PGPSUBTYPE_INTERNAL_107 = 107, PGPSUBTYPE_INTERNAL_108 = 108, PGPSUBTYPE_INTERNAL_109 = 109, PGPSUBTYPE_INTERNAL_110 = 110,
  PGPSUBTYPE_CRITICAL = 128
}
 5.2.3.1. More...
 
enum  pgpArmor_e {
  PGPARMOR_ERR_CRC_CHECK = -7, PGPARMOR_ERR_BODY_DECODE = -6, PGPARMOR_ERR_CRC_DECODE = -5, PGPARMOR_ERR_NO_END_PGP = -4,
  PGPARMOR_ERR_UNKNOWN_PREAMBLE_TAG = -3, PGPARMOR_ERR_UNKNOWN_ARMOR_TYPE = -2, PGPARMOR_ERR_NO_BEGIN_PGP = -1, PGPARMOR_NONE = 0,
  PGPARMOR_MESSAGE = 1, PGPARMOR_PUBKEY = 2, PGPARMOR_SIGNATURE = 3, PGPARMOR_SIGNED_MESSAGE = 4,
  PGPARMOR_FILE = 5, PGPARMOR_PRIVKEY = 6, PGPARMOR_SECKEY = 7
}
 
enum  pgpArmorKey_e {
  PGPARMORKEY_VERSION = 1, PGPARMORKEY_COMMENT = 2, PGPARMORKEY_MESSAGEID = 3, PGPARMORKEY_HASH = 4,
  PGPARMORKEY_CHARSET = 5
}
 

Functions

static unsigned int pgpGrab (const rpmuint8_t *s, size_t nbytes)
 Return (native-endian) integer from big-endian representation. More...
 
static unsigned int pgpLen (const rpmuint8_t *s, unsigned int *lenp)
 Return length of an OpenPGP packet. More...
 
static unsigned int pgpMpiBits (const rpmuint8_t *p)
 Return no. More...
 
static unsigned int pgpMpiLen (const rpmuint8_t *p)
 Return no. More...
 
static char * pgpHexCvt (char *t, const rpmuint8_t *s, size_t nbytes)
 Convert to hex. More...
 
static char * pgpHexStr (const rpmuint8_t *p, size_t plen)
 Return hex formatted representation of bytes. More...
 
static const char * pgpMpiStr (const rpmuint8_t *p)
 Return hex formatted representation of a multiprecision integer. More...
 
static const char * pgpValStr (pgpValTbl vs, rpmuint8_t val)
 Return string representation of an OpenPGP value. More...
 
static const char * _pgpTag2Name (uint32_t tag)
 
static const char * _pgpSigType2Name (uint32_t sigtype)
 
static const char * _pgpHashAlgo2Name (uint32_t algo)
 
static const char * _pgpPubkeyAlgo2Name (uint32_t algo)
 
static rpmuint8_t pgpStrVal (pgpValTbl vs, const char *str)
 Return byte value of an OpenPGP string. More...
 
static int pgpValTok (pgpValTbl vs, const char *s, const char *se)
 Return value of an OpenPGP string. More...
 
void pgpPrtVal (const char *pre, pgpValTbl vs, rpmuint8_t val)
 Print an OpenPGP value. More...
 
int pgpPubkeyFingerprint (const rpmuint8_t *pkt, size_t pktlen, rpmuint8_t *keyid)
 Print/parse an OpenPGP subtype packet. More...
 
int pgpExtractPubkeyFingerprint (const char *b64pkt, rpmuint8_t *keyid)
 Extract OpenPGP public key fingerprint from base64 encoded packet. More...
 
int pgpPrtPkt (const rpmuint8_t *pkt, size_t pleft)
 Return lenth of a OpenPGP packet. More...
 
int pgpGrabPkts (const rpmuint8_t *pkts, size_t pktlen, rpmuint8_t ***pppkts, int *pnpkts)
 Return array of packet pointers. More...
 
int pgpPrtPkts (const rpmuint8_t *pkts, size_t pktlen, pgpDig dig, int printing)
 Print/parse a OpenPGP packet(s). More...
 
pgpArmor pgpArmorUnwrap (rpmiob iob, rpmuint8_t **pkt, size_t *pktlen)
 Parse armored OpenPGP packets from an iob. More...
 
pgpArmor pgpReadPkts (const char *fn, rpmuint8_t **pkt, size_t *pktlen)
 Parse armored OpenPGP packets from a file. More...
 
char * pgpArmorWrap (rpmuint8_t atype, const unsigned char *s, size_t ns)
 Wrap a OpenPGP packets in ascii armor for transport. More...
 
pgpHashAlgo pgpHashAlgoStringToNumber (const char *name, size_t name_len)
 Convert a hash algorithm "foo" to the internal PGPHASHALGO_FOO number. More...
 
pgpDig pgpDigUnlink (pgpDig dig)
 Unreference a signature parameters instance. More...
 
pgpDig pgpDigLink (pgpDig dig)
 Reference a signature parameters instance. More...
 
pgpDig pgpDigFree (pgpDig dig)
 Destroy a container for parsed OpenPGP packates. More...
 
pgpDig pgpDigNew (pgpVSFlags vsflags, pgpPubkeyAlgo pubkey_algo)
 Create a container for parsed OpenPGP packates. More...
 
void pgpDigClean (pgpDig dig)
 Release (malloc'd) data from container. More...
 
const char * pgpHashAlgo2Name (uint32_t algo)
 
const char * pgpPubkeyAlgo2Name (uint32_t algo)
 
rpmuint8_t pgpHashName2Algo (const char *name)
 
rpmuint8_t pgpPubkeyName2Algo (const char *name)
 
int pgpDigSetAlgos (pgpDig dig)
 
int pgpExportPubkey (pgpDig dig)
 
int pgpExportSignature (pgpDig dig, DIGEST_CTX ctx)
 
pgpDigParams pgpGetPubkey (const pgpDig dig)
 Return OpenPGP pubkey parameters. More...
 
pgpDigParams pgpGetSignature (const pgpDig dig)
 Return OpenPGP signature parameters. More...
 
rpmuint32_t pgpGetSigtag (const pgpDig dig)
 Get signature tag. More...
 
rpmuint32_t pgpGetSigtype (const pgpDig dig)
 Get signature tag type. More...
 
const void * pgpGetSig (const pgpDig dig)
 Get signature tag data, i.e. More...
 
rpmuint32_t pgpGetSiglen (const pgpDig dig)
 Get signature tag data length, i.e. More...
 
int pgpSetSig (pgpDig dig, rpmuint32_t sigtag, rpmuint32_t sigtype, const void *sig, rpmuint32_t siglen)
 Set signature tag info, i.e. More...
 
void * pgpStatsAccumulator (pgpDig dig, int opx)
 Return pgpDig container accumulator structure. More...
 
int pgpSetFindPubkey (pgpDig dig, int(*findPubkey)(void *ts, void *dig), void *_ts)
 Set find pubkey vector. More...
 
int pgpFindPubkey (pgpDig dig)
 Call find pubkey vector. More...
 
static int pgpIsPkt (const rpmuint8_t *p, pgpTag *tagp)
 Is buffer at beginning of an OpenPGP packet? More...
 
static unsigned int pgpCRC (const rpmuint8_t *octets, size_t len)
 Return CRC of a buffer. More...
 
static int pgpImplSetRSA (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp)
 
static int pgpImplSetDSA (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp)
 
static int pgpImplSetELG (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp)
 
static int pgpImplSetECDSA (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp)
 
static int pgpImplErrChk (pgpDig dig, const char *msg, int rc, unsigned expected)
 
static int pgpImplAvailableCipher (pgpDig dig, int algo)
 
static int pgpImplAvailableDigest (pgpDig dig, int algo)
 
static int pgpImplAvailablePubkey (pgpDig dig, int algo)
 
static int pgpImplVerify (pgpDig dig)
 
static int pgpImplSign (pgpDig dig)
 
static int pgpImplGenerate (pgpDig dig)
 
static int pgpImplMpiItem (const char *pre, pgpDig dig, int itemno, const rpmuint8_t *p, const rpmuint8_t *pend)
 
static void pgpImplClean (void *impl)
 
static void * pgpImplFree (void *impl)
 
static void * pgpImplInit (void)
 

Variables

struct pgpValTbl_s pgpTagTbl []
 
struct pgpValTbl_s pgpSigTypeTbl []
 
struct pgpValTbl_s pgpPubkeyTbl []
 
struct pgpValTbl_s pgpSymkeyTbl []
 Symmetric key (string, value) pairs. More...
 
struct pgpValTbl_s pgpCompressionTbl []
 Compression (string, value) pairs. More...
 
struct pgpValTbl_s pgpHashTbl []
 Hash (string, value) pairs. More...
 
struct pgpValTbl_s pgpSubTypeTbl []
 Subtype (string, value) pairs. More...
 
struct pgpValTbl_s pgpArmorTbl []
 Armor (string, value) pairs. More...
 
struct pgpValTbl_s pgpArmorKeyTbl []
 Armor key (string, value) pairs. More...
 
pgpVSFlags pgpDigVSFlags
 Disabler bits(s) for signature/digest checking. More...
 
pgpImplVecs_tpgpImplVecs
 

Detailed Description

OpenPGP constants and structures from RFC-2440.

Text from RFC-2440 in comments is Copyright (C) The Internet Society (1998). All Rights Reserved.

Definition in file rpmpgp.h.

Macro Definition Documentation

#define CRC24_INIT   0xb704ce

Definition at line 1663 of file rpmpgp.h.

Referenced by pgpCRC().

#define CRC24_POLY   0x1864cfb

Definition at line 1664 of file rpmpgp.h.

Referenced by pgpCRC().

#define PGPARMOR_ERROR   PGPARMOR_ERR_NO_BEGIN_PGP

Definition at line 956 of file rpmpgp.h.

Referenced by rpmhkpLookup().

#define pgpDigFree (   _dig)    ((pgpDig)rpmioFreePoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__))

Definition at line 1473 of file rpmpgp.h.

#define pgpDigLink (   _dig)    ((pgpDig)rpmioLinkPoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__))

Definition at line 1462 of file rpmpgp.h.

#define pgpDigUnlink (   _dig)    ((pgpDig)rpmioUnlinkPoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__))

Definition at line 1451 of file rpmpgp.h.

Typedef Documentation

typedef enum pgpArmor_e pgpArmor
typedef enum pgpArmorKey_e pgpArmorKey

9.3.

Compression Algorithms

       ID           Algorithm
       --           ---------
       0          - Uncompressed
       1          - ZIP (RFC 1951)
       2          - ZLIB (RFC 1950)
       100 to 110 - Private/Experimental algorithm.

Implementations MUST implement uncompressed data. Implementations SHOULD implement ZIP. Implementations MAY implement ZLIB.

typedef int(* pgpImplAvailable_t)(pgpDig dig, int algo)

Definition at line 1702 of file rpmpgp.h.

typedef void(* pgpImplClean_t)(void *impl)

Definition at line 1729 of file rpmpgp.h.

typedef int(* pgpImplErrChk_t)(pgpDig dig, const char *msg, int rc, unsigned expected)

Definition at line 1697 of file rpmpgp.h.

typedef void*(* pgpImplFree_t)(void *impl)

Definition at line 1734 of file rpmpgp.h.

typedef int(* pgpImplGenerate_t)(pgpDig dig)

Definition at line 1707 of file rpmpgp.h.

typedef void*(* pgpImplInit_t)(void)

Definition at line 1739 of file rpmpgp.h.

typedef int(* pgpImplMpiItem_t)(const char *pre, pgpDig dig, int itemno, const rpmuint8_t *p,const rpmuint8_t *pend)

Definition at line 1722 of file rpmpgp.h.

typedef int(* pgpImplSet_t)(DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp)

Definition at line 1692 of file rpmpgp.h.

typedef int(* pgpImplSign_t)(pgpDig dig)

Definition at line 1712 of file rpmpgp.h.

typedef struct pgpImplVecs_s pgpImplVecs_t
typedef int(* pgpImplVerify_t)(pgpDig dig)

Definition at line 1717 of file rpmpgp.h.

typedef struct pgpPktCdata_s pgpPktCdata

5.6.

Compressed Data Packet (Tag 8)

The Compressed Data packet contains compressed data. Typically, this packet is found as the contents of an encrypted packet, or following a Signature or One-Pass Signature packet, and contains literal data packets.

The body of this packet consists of:

  • One octet that gives the algorithm used to compress the packet.
  • The remainder of the packet is compressed data.

A Compressed Data Packet's body contains an block that compresses some set of packets. See section "Packet Composition" for details on how messages are formed.

ZIP-compressed packets are compressed with raw RFC 1951 DEFLATE blocks. Note that PGP V2.6 uses 13 bits of compression. If an implementation uses more bits of compression, PGP V2.6 cannot decompress it.

ZLIB-compressed packets are compressed with RFC 1950 ZLIB-style blocks.

typedef struct pgpPktEdata_s pgpPktEdata

5.7.

Symmetrically Encrypted Data Packet (Tag 9)

The Symmetrically Encrypted Data packet contains data encrypted with a symmetric-key algorithm. When it has been decrypted, it will typically contain other packets (often literal data packets or compressed data packets).

The body of this packet consists of:

  • Encrypted data, the output of the selected symmetric-key cipher operating in PGP's variant of Cipher Feedback (CFB) mode.

The symmetric cipher used may be specified in an Public-Key or Symmetric-Key Encrypted Session Key packet that precedes the Symmetrically Encrypted Data Packet. In that case, the cipher algorithm octet is prefixed to the session key before it is encrypted. If no packets of these types precede the encrypted data, the IDEA algorithm is used with the session key calculated as the MD5 hash of the passphrase.

The data is encrypted in CFB mode, with a CFB shift size equal to the cipher's block size. The Initial Vector (IV) is specified as all zeros. Instead of using an IV, OpenPGP prefixes a 10-octet string to the data before it is encrypted. The first eight octets are random, and the 9th and 10th octets are copies of the 7th and 8th octets, respectively. After encrypting the first 10 octets, the CFB state is resynchronized if the cipher block size is 8 octets or less. The last 8 octets of ciphertext are passed through the cipher and the block boundary is reset.

The repetition of 16 bits in the 80 bits of random data prefixed to the message allows the receiver to immediately check whether the session key is incorrect.

typedef union pgpPktKey_u pgpPktKey

5.5.3.

Secret Key Packet Formats

The Secret Key and Secret Subkey packets contain all the data of the Public Key and Public Subkey packets, with additional algorithm- specific secret key data appended, in encrypted form.

The packet contains:

  • A Public Key or Public Subkey packet, as described above
  • One octet indicating string-to-key usage conventions. 0 indicates that the secret key data is not encrypted. 255 indicates that a string-to-key specifier is being given. Any other value is a symmetric-key encryption algorithm specifier.
  • [Optional] If string-to-key usage octet was 255, a one-octet symmetric encryption algorithm.
  • [Optional] If string-to-key usage octet was 255, a string-to-key specifier. The length of the string-to-key specifier is implied by its type, as described above.
  • [Optional] If secret data is encrypted, eight-octet Initial Vector (IV).
  • Encrypted multi-precision integers comprising the secret key data. These algorithm-specific fields are as described below.
  • Two-octet checksum of the plaintext of the algorithm-specific portion (sum of all octets, mod 65536).

    Algorithm Specific Fields for RSA secret keys:

    • multiprecision integer (MPI) of RSA secret exponent d.
    • MPI of RSA secret prime value p.
    • MPI of RSA secret prime value q (p < q).
    • MPI of u, the multiplicative inverse of p, mod q.

    Algorithm Specific Fields for DSA secret keys:

    • MPI of DSA secret exponent x.

    Algorithm Specific Fields for Elgamal secret keys:

    • MPI of Elgamal secret exponent x.

Secret MPI values can be encrypted using a passphrase. If a string- to-key specifier is given, that describes the algorithm for converting the passphrase to a key, else a simple MD5 hash of the passphrase is used. Implementations SHOULD use a string-to-key specifier; the simple hash is for backward compatibility. The cipher for encrypting the MPIs is specified in the secret key packet.

Encryption/decryption of the secret data is done in CFB mode using the key created from the passphrase and the Initial Vector from the packet. A different mode is used with V3 keys (which are only RSA) than with other key formats. With V3 keys, the MPI bit count prefix (i.e., the first two octets) is not encrypted. Only the MPI non- prefix data is encrypted. Furthermore, the CFB state is resynchronized at the beginning of each new MPI value, so that the CFB block boundary is aligned with the start of the MPI data.

With V4 keys, a simpler method is used. All secret MPI values are encrypted in CFB mode, including the MPI bitcount prefix.

The 16-bit checksum that follows the algorithm-specific portion is the algebraic sum, mod 65536, of the plaintext of all the algorithm- specific octets (including MPI prefix and data). With V3 keys, the checksum is stored in the clear. With V4 keys, the checksum is encrypted like the algorithm-specific data. This value is used to check that the passphrase was correct.

typedef struct pgpPktKeyV3_s * pgpPktKeyV3

5.5.1.

Key Packet Variants

5.5.1.1. Public Key Packet (Tag 6)

A Public Key packet starts a series of packets that forms an OpenPGP key (sometimes called an OpenPGP certificate).

5.5.1.2. Public Subkey Packet (Tag 14)

A Public Subkey packet (tag 14) has exactly the same format as a Public Key packet, but denotes a subkey. One or more subkeys may be associated with a top-level key. By convention, the top-level key provides signature services, and the subkeys provide encryption services.

Note: in PGP 2.6.x, tag 14 was intended to indicate a comment packet. This tag was selected for reuse because no previous version of PGP ever emitted comment packets but they did properly ignore them. Public Subkey packets are ignored by PGP 2.6.x and do not cause it to fail, providing a limited degree of backward compatibility.

5.5.1.3. Secret Key Packet (Tag 5)

A Secret Key packet contains all the information that is found in a Public Key packet, including the public key material, but also includes the secret key material after all the public key fields.

5.5.1.4. Secret Subkey Packet (Tag 7)

A Secret Subkey packet (tag 7) is the subkey analog of the Secret Key packet, and has exactly the same format.

5.5.2. Public Key Packet Formats

There are two versions of key-material packets. Version 3 packets were first generated by PGP 2.6. Version 2 packets are identical in format to Version 3 packets, but are generated by PGP 2.5 or before. V2 packets are deprecated and they MUST NOT be generated. PGP 5.0 introduced version 4 packets, with new fields and semantics. PGP 2.6.x will not accept key-material packets with versions greater than 3.

OpenPGP implementations SHOULD create keys with version 4 format. An implementation MAY generate a V3 key to ensure interoperability with old software; note, however, that V4 keys correct some security deficiencies in V3 keys. These deficiencies are described below. An implementation MUST NOT create a V3 key with a public key algorithm other than RSA.

A version 3 public key or public subkey packet contains:

  • A one-octet version number (3).
  • A four-octet number denoting the time that the key was created.
  • A two-octet number denoting the time in days that this key is valid. If this number is zero, then it does not expire.
  • A one-octet number denoting the public key algorithm of this key
  • A series of multi-precision integers comprising the key material:
    • a multiprecision integer (MPI) of RSA public modulus n;
    • an MPI of RSA public encryption exponent e.

V3 keys SHOULD only be used for backward compatibility because of three weaknesses in them. First, it is relatively easy to construct a V3 key that has the same key ID as any other key because the key ID is simply the low 64 bits of the public modulus. Secondly, because the fingerprint of a V3 key hashes the key material, but not its length, which increases the opportunity for fingerprint collisions. Third, there are minor weaknesses in the MD5 hash algorithm that make developers prefer other algorithms. See below for a fuller discussion of key IDs and fingerprints.

typedef struct pgpPktKeyV4_s * pgpPktKeyV4

The version 4 format is similar to the version 3 format except for the absence of a validity period.

This has been moved to the signature packet. In addition, fingerprints of version 4 keys are calculated differently from version 3 keys, as described in section "Enhanced Key Formats."

A version 4 packet contains:

  • A one-octet version number (4).
  • A four-octet number denoting the time that the key was created.
  • A one-octet number denoting the public key algorithm of this key
  • A series of multi-precision integers comprising the key material. This algorithm-specific portion is:

    Algorithm Specific Fields for RSA public keys:

    • multiprecision integer (MPI) of RSA public modulus n;
    • MPI of RSA public encryption exponent e.

    Algorithm Specific Fields for DSA public keys:

    • MPI of DSA prime p;
    • MPI of DSA group order q (q is a prime divisor of p-1);
    • MPI of DSA group generator g;
    • MPI of DSA public key value y (= g**x where x is secret).

    Algorithm Specific Fields for Elgamal public keys:

    • MPI of Elgamal prime p;
    • MPI of Elgamal group generator g;
    • MPI of Elgamal public key value y (= g**x where x is secret).
typedef struct pgpPktLdata_s pgpPktLdata

5.8.

Marker Packet (Obsolete Literal Packet) (Tag 10)

An experimental version of PGP used this packet as the Literal packet, but no released version of PGP generated Literal packets with this tag. With PGP 5.x, this packet has been re-assigned and is reserved for use as the Marker packet.

The body of this packet consists of:

  • The three octets 0x50, 0x47, 0x50 (which spell "PGP" in UTF-8).

Such a packet MUST be ignored when received. It may be placed at the beginning of a message that uses features not available in PGP 2.6.x in order to cause that version to report that newer software is necessary to process the message.

typedef struct pgpPktOnepass_s * pgpPktOnepass

5.4.

One-Pass Signature Packets (Tag 4)

The One-Pass Signature packet precedes the signed data and contains enough information to allow the receiver to begin calculating any hashes needed to verify the signature. It allows the Signature Packet to be placed at the end of the message, so that the signer can compute the entire signed message in one pass.

A One-Pass Signature does not interoperate with PGP 2.6.x or earlier.

The body of this packet consists of:

  • A one-octet version number. The current version is 3.
  • A one-octet signature type. Signature types are described in section 5.2.1.
  • A one-octet number describing the hash algorithm used.
  • A one-octet number describing the public key algorithm used.
  • An eight-octet number holding the key ID of the signing key.
  • A one-octet number holding a flag showing whether the signature is nested. A zero value indicates that the next packet is another One-Pass Signature packet that describes another signature to be applied to the same message data.

Note that if a message contains more than one one-pass signature, then the signature packets bracket the message; that is, the first signature packet after the message corresponds to the last one-pass packet and the final signature packet corresponds to the first one- pass packet.

typedef struct pgpPktPubkey_s pgpPktPubkey

5.1.

Public-Key Encrypted Session Key Packets (Tag 1)

A Public-Key Encrypted Session Key packet holds the session key used to encrypt a message. Zero or more Encrypted Session Key packets (either Public-Key or Symmetric-Key) may precede a Symmetrically Encrypted Data Packet, which holds an encrypted message. The message is encrypted with the session key, and the session key is itself encrypted and stored in the Encrypted Session Key packet(s). The Symmetrically Encrypted Data Packet is preceded by one Public-Key Encrypted Session Key packet for each OpenPGP key to which the message is encrypted. The recipient of the message finds a session key that is encrypted to their public key, decrypts the session key, and then uses the session key to decrypt the message.

The body of this packet consists of:

  • A one-octet number giving the version number of the packet type. The currently defined value for packet version is 3. An implementation should accept, but not generate a version of 2, which is equivalent to V3 in all other respects.
  • An eight-octet number that gives the key ID of the public key that the session key is encrypted to.
  • A one-octet number giving the public key algorithm used.
  • A string of octets that is the encrypted session key. This string takes up the remainder of the packet, and its contents are dependent on the public key algorithm used.

Algorithm Specific Fields for RSA encryption

  • multiprecision integer (MPI) of RSA encrypted value m**e mod n.

Algorithm Specific Fields for Elgamal encryption:

  • MPI of Elgamal (Diffie-Hellman) value g**k mod p.
  • MPI of Elgamal (Diffie-Hellman) value m * y**k mod p.
typedef union pgpPktSig_u * pgpPktSig

5.2.

Signature Packet (Tag 2)

A signature packet describes a binding between some public key and some data. The most common signatures are a signature of a file or a block of text, and a signature that is a certification of a user ID.

Two versions of signature packets are defined. Version 3 provides basic signature information, while version 4 provides an expandable format with subpackets that can specify more information about the signature. PGP 2.6.x only accepts version 3 signatures.

Implementations MUST accept V3 signatures. Implementations SHOULD generate V4 signatures. Implementations MAY generate a V3 signature that can be verified by PGP 2.6.x.

Note that if an implementation is creating an encrypted and signed message that is encrypted to a V3 key, it is reasonable to create a V3 signature.

typedef struct pgpPktSigV3_s * pgpPktSigV3

5.2.2.

Version 3 Signature Packet Format

The body of a version 3 Signature Packet contains:

  • One-octet version number (3).
  • One-octet length of following hashed material. MUST be 5.
    • One-octet signature type.
    • Four-octet creation time.
  • Eight-octet key ID of signer.
  • One-octet public key algorithm.
  • One-octet hash algorithm.
  • Two-octet field holding left 16 bits of signed hash value.
  • One or more multi-precision integers comprising the signature.

Algorithm Specific Fields for RSA signatures:

  • multiprecision integer (MPI) of RSA signature value m**d.

Algorithm Specific Fields for DSA signatures:

  • MPI of DSA value r.
  • MPI of DSA value s.
typedef struct pgpPktSigV4_s * pgpPktSigV4

5.2.3.

Version 4 Signature Packet Format

The body of a version 4 Signature Packet contains:

  • One-octet version number (4).
  • One-octet signature type.
  • One-octet public key algorithm.
  • One-octet hash algorithm.
  • Two-octet scalar octet count for following hashed subpacket data. Note that this is the length in octets of all of the hashed subpackets; a pointer incremented by this number will skip over the hashed subpackets.
  • Hashed subpacket data. (zero or more subpackets)
  • Two-octet scalar octet count for following unhashed subpacket data. Note that this is the length in octets of all of the unhashed subpackets; a pointer incremented by this number will skip over the unhashed subpackets.
  • Unhashed subpacket data. (zero or more subpackets)
  • Two-octet field holding left 16 bits of signed hash value.
  • One or more multi-precision integers comprising the signature.
typedef struct pgpPktSymkey_s pgpPktSymkey

5.3.

Symmetric-Key Encrypted Session-Key Packets (Tag 3)

The Symmetric-Key Encrypted Session Key packet holds the symmetric- key encryption of a session key used to encrypt a message. Zero or more Encrypted Session Key packets and/or Symmetric-Key Encrypted Session Key packets may precede a Symmetrically Encrypted Data Packet that holds an encrypted message. The message is encrypted with a session key, and the session key is itself encrypted and stored in the Encrypted Session Key packet or the Symmetric-Key Encrypted Session Key packet.

If the Symmetrically Encrypted Data Packet is preceded by one or more Symmetric-Key Encrypted Session Key packets, each specifies a passphrase that may be used to decrypt the message. This allows a message to be encrypted to a number of public keys, and also to one or more pass phrases. This packet type is new, and is not generated by PGP 2.x or PGP 5.0.

The body of this packet consists of:

  • A one-octet version number. The only currently defined version is 4.
  • A one-octet number describing the symmetric algorithm used.
  • A string-to-key (S2K) specifier, length as defined above.
  • Optionally, the encrypted session key itself, which is decrypted with the string-to-key object.
typedef struct pgpPktTrust_s pgpPktTrust

5.10.

Trust Packet (Tag 12)

The Trust packet is used only within keyrings and is not normally exported. Trust packets contain data that record the user's specifications of which key holders are trustworthy introducers, along with other information that implementing software uses for trust information.

Trust packets SHOULD NOT be emitted to output streams that are transferred to other users, and they SHOULD be ignored on any input other than local keyring files.

typedef struct pgpPktUid_s pgpPktUid

5.11.

User ID Packet (Tag 13)

A User ID packet consists of data that is intended to represent the name and email address of the key holder. By convention, it includes an RFC 822 mail name, but there are no restrictions on its content. The packet length in the header specifies the length of the user id. If it is text, it is encoded in UTF-8.

9.1.

Public Key Algorithms

       ID           Algorithm
       --           ---------
       1          - RSA (Encrypt or Sign)
       2          - RSA Encrypt-Only
       3          - RSA Sign-Only
       16         - Elgamal (Encrypt-Only), see [ELGAMAL]
       17         - DSA (Digital Signature Standard)
       18         - Reserved for Elliptic Curve
       19         - Reserved for ECDSA
       20         - Elgamal (Encrypt or Sign)
       21         - Reserved for Diffie-Hellman (X9.42,
                    as defined for IETF-S/MIME)
       100 to 110 - Private/Experimental algorithm.

Implementations MUST implement DSA for signatures, and Elgamal for encryption. Implementations SHOULD implement RSA keys. Implementations MAY implement any other algorithm.

typedef enum pgpSigType_e pgpSigType

5.2.1.

Signature Types

There are a number of possible meanings for a signature, which are specified in a signature type octet in any given signature.

typedef enum pgpSubType_e pgpSubType

5.2.3.1.

Signature Subpacket Specification

The subpacket fields consist of zero or more signature subpackets. Each set of subpackets is preceded by a two-octet scalar count of the length of the set of subpackets.

Each subpacket consists of a subpacket header and a body. The header consists of:

  • the subpacket length (1, 2, or 5 octets)
  • the subpacket type (1 octet) and is followed by the subpacket specific data.

The length includes the type octet but not this length. Its format is similar to the "new" format packet header lengths, but cannot have partial body lengths. That is:

       if the 1st octet <  192, then
           lengthOfLength = 1
           subpacketLen = 1st_octet

       if the 1st octet >= 192 and < 255, then
           lengthOfLength = 2
           subpacketLen = ((1st_octet - 192) << 8) + (2nd_octet) + 192

       if the 1st octet = 255, then
           lengthOfLength = 5
           subpacket length = [four-octet scalar starting at 2nd_octet]

The value of the subpacket type octet may be:

       0 = reserved
       1 = reserved
       2 = signature creation time
       3 = signature expiration time
       4 = exportable certification
       5 = trust signature
       6 = regular expression
       7 = revocable
       8 = reserved
       9 = key expiration time
       10 = placeholder for backward compatibility
       11 = preferred symmetric algorithms
       12 = revocation key
       13 = reserved
       14 = reserved
       15 = reserved
       16 = issuer key ID
       17 = reserved
       18 = reserved
       19 = reserved
       20 = notation data
       21 = preferred hash algorithms
       22 = preferred compression algorithms
       23 = key server preferences
       24 = preferred key server
       25 = primary user id
       26 = policy URL
       27 = key flags
       28 = signer's user id
       29 = reason for revocation
       30 = features
       31 = signature target
       32 = embedded signature
       100 to 110 = internal or user-defined

An implementation SHOULD ignore any subpacket of a type that it does not recognize.

Bit 7 of the subpacket type is the "critical" bit. If set, it denotes that the subpacket is one that is critical for the evaluator of the signature to recognize. If a subpacket is encountered that is marked critical but is unknown to the evaluating software, the evaluator SHOULD consider the signature to be in error.

typedef enum pgpTag_e pgpTag

4.3.

Packet Tags

The packet tag denotes what type of packet the body holds. Note that old format headers can only have tags less than 16, whereas new format headers can have tags as great as 63.

typedef const struct pgpValTbl_s * pgpValTbl

Enumeration Type Documentation

enum pgpArmor_e
Enumerator
PGPARMOR_ERR_CRC_CHECK 
PGPARMOR_ERR_BODY_DECODE 
PGPARMOR_ERR_CRC_DECODE 
PGPARMOR_ERR_NO_END_PGP 
PGPARMOR_ERR_UNKNOWN_PREAMBLE_TAG 
PGPARMOR_ERR_UNKNOWN_ARMOR_TYPE 
PGPARMOR_ERR_NO_BEGIN_PGP 
PGPARMOR_NONE 
PGPARMOR_MESSAGE 

MESSAGE

PGPARMOR_PUBKEY 

PUBLIC KEY BLOCK

PGPARMOR_SIGNATURE 

SIGNATURE

PGPARMOR_SIGNED_MESSAGE 

SIGNED MESSAGE

PGPARMOR_FILE 

ARMORED FILE

PGPARMOR_PRIVKEY 

PRIVATE KEY BLOCK

PGPARMOR_SECKEY 

SECRET KEY BLOCK

Definition at line 948 of file rpmpgp.h.

Enumerator
PGPARMORKEY_VERSION 

Version:

PGPARMORKEY_COMMENT 

Comment:

PGPARMORKEY_MESSAGEID 

MessageID:

PGPARMORKEY_HASH 

Hash:

PGPARMORKEY_CHARSET 

Charset:

Definition at line 977 of file rpmpgp.h.

9.3.

Compression Algorithms

       ID           Algorithm
       --           ---------
       0          - Uncompressed
       1          - ZIP (RFC 1951)
       2          - ZLIB (RFC 1950)
       100 to 110 - Private/Experimental algorithm.

Implementations MUST implement uncompressed data. Implementations SHOULD implement ZIP. Implementations MAY implement ZLIB.

Enumerator
PGPCOMPRESSALGO_NONE 

Uncompressed

PGPCOMPRESSALGO_ZIP 

ZIP

PGPCOMPRESSALGO_ZLIB 

ZLIB

PGPCOMPRESSALGO_BZIP2 

BZIP2

Definition at line 303 of file rpmpgp.h.

9.1.

Public Key Algorithms

       ID           Algorithm
       --           ---------
       1          - RSA (Encrypt or Sign)
       2          - RSA Encrypt-Only
       3          - RSA Sign-Only
       16         - Elgamal (Encrypt-Only), see [ELGAMAL]
       17         - DSA (Digital Signature Standard)
       18         - Reserved for Elliptic Curve
       19         - Reserved for ECDSA
       20         - Elgamal (Encrypt or Sign)
       21         - Reserved for Diffie-Hellman (X9.42,
                    as defined for IETF-S/MIME)
       100 to 110 - Private/Experimental algorithm.

Implementations MUST implement DSA for signatures, and Elgamal for encryption. Implementations SHOULD implement RSA keys. Implementations MAY implement any other algorithm.

Enumerator
PGPPUBKEYALGO_UNKNOWN 
PGPPUBKEYALGO_RSA 

RSA

PGPPUBKEYALGO_RSA_E 

RSA(Encrypt-Only)

PGPPUBKEYALGO_RSA_S 

RSA(Sign-Only)

PGPPUBKEYALGO_ELGAMAL_E 

Elgamal(Encrypt-Only)

PGPPUBKEYALGO_DSA 

DSA

PGPPUBKEYALGO_ECDH 

ECDH

PGPPUBKEYALGO_ECDSA 

ECDSA

PGPPUBKEYALGO_ELGAMAL 

Elgamal

PGPPUBKEYALGO_EDDSA 

EDDSA

Definition at line 262 of file rpmpgp.h.

5.2.1.

Signature Types

There are a number of possible meanings for a signature, which are specified in a signature type octet in any given signature.

Enumerator
PGPSIGTYPE_BINARY 

Binary document

PGPSIGTYPE_TEXT 

Canonical text document

PGPSIGTYPE_STANDALONE 

Standalone

PGPSIGTYPE_GENERIC_CERT 

Generic certification of a User ID & Public Key

PGPSIGTYPE_PERSONA_CERT 

Persona certification of a User ID & Public Key

PGPSIGTYPE_CASUAL_CERT 

Casual certification of a User ID & Public Key

PGPSIGTYPE_POSITIVE_CERT 

Positive certification of a User ID & Public Key

PGPSIGTYPE_SUBKEY_BINDING 

Subkey Binding

PGPSIGTYPE_KEY_BINDING 

Primary key Binding

PGPSIGTYPE_SIGNED_KEY 

Signature directly on a key

PGPSIGTYPE_KEY_REVOKE 

Key revocation

PGPSIGTYPE_SUBKEY_REVOKE 

Subkey revocation

PGPSIGTYPE_CERT_REVOKE 

Certification revocation

PGPSIGTYPE_TIMESTAMP 

Timestamp

PGPSIGTYPE_CONFIRM 

Third-Party confirmation

Definition at line 210 of file rpmpgp.h.

5.2.3.1.

Signature Subpacket Specification

The subpacket fields consist of zero or more signature subpackets. Each set of subpackets is preceded by a two-octet scalar count of the length of the set of subpackets.

Each subpacket consists of a subpacket header and a body. The header consists of:

  • the subpacket length (1, 2, or 5 octets)
  • the subpacket type (1 octet) and is followed by the subpacket specific data.

The length includes the type octet but not this length. Its format is similar to the "new" format packet header lengths, but cannot have partial body lengths. That is:

       if the 1st octet <  192, then
           lengthOfLength = 1
           subpacketLen = 1st_octet

       if the 1st octet >= 192 and < 255, then
           lengthOfLength = 2
           subpacketLen = ((1st_octet - 192) << 8) + (2nd_octet) + 192

       if the 1st octet = 255, then
           lengthOfLength = 5
           subpacket length = [four-octet scalar starting at 2nd_octet]

The value of the subpacket type octet may be:

       0 = reserved
       1 = reserved
       2 = signature creation time
       3 = signature expiration time
       4 = exportable certification
       5 = trust signature
       6 = regular expression
       7 = revocable
       8 = reserved
       9 = key expiration time
       10 = placeholder for backward compatibility
       11 = preferred symmetric algorithms
       12 = revocation key
       13 = reserved
       14 = reserved
       15 = reserved
       16 = issuer key ID
       17 = reserved
       18 = reserved
       19 = reserved
       20 = notation data
       21 = preferred hash algorithms
       22 = preferred compression algorithms
       23 = key server preferences
       24 = preferred key server
       25 = primary user id
       26 = policy URL
       27 = key flags
       28 = signer's user id
       29 = reason for revocation
       30 = features
       31 = signature target
       32 = embedded signature
       100 to 110 = internal or user-defined

An implementation SHOULD ignore any subpacket of a type that it does not recognize.

Bit 7 of the subpacket type is the "critical" bit. If set, it denotes that the subpacket is one that is critical for the evaluator of the signature to recognize. If a subpacket is encountered that is marked critical but is unknown to the evaluating software, the evaluator SHOULD consider the signature to be in error.

Enumerator
PGPSUBTYPE_NONE 

none

PGPSUBTYPE_SIG_CREATE_TIME 

signature creation time

PGPSUBTYPE_SIG_EXPIRE_TIME 

signature expiration time

PGPSUBTYPE_EXPORTABLE_CERT 

exportable certification

PGPSUBTYPE_TRUST_SIG 

trust signature

PGPSUBTYPE_REGEX 

regular expression

PGPSUBTYPE_REVOCABLE 

revocable

PGPSUBTYPE_KEY_EXPIRE_TIME 

key expiration time

PGPSUBTYPE_ARR 

additional recipient request

PGPSUBTYPE_PREFER_SYMKEY 

preferred symmetric algorithms

PGPSUBTYPE_REVOKE_KEY 

revocation key

PGPSUBTYPE_ISSUER_KEYID 

issuer key ID

PGPSUBTYPE_NOTATION 

notation data

PGPSUBTYPE_PREFER_HASH 

preferred hash algorithms

PGPSUBTYPE_PREFER_COMPRESS 

preferred compression algorithms

PGPSUBTYPE_KEYSERVER_PREFERS 

key server preferences

PGPSUBTYPE_PREFER_KEYSERVER 

preferred key server

PGPSUBTYPE_PRIMARY_USERID 

primary user id

PGPSUBTYPE_POLICY_URL 

policy URL

PGPSUBTYPE_KEY_FLAGS 

key flags

PGPSUBTYPE_SIGNER_USERID 

signer's user id

PGPSUBTYPE_REVOKE_REASON 

reason for revocation

PGPSUBTYPE_FEATURES 

feature flags

PGPSUBTYPE_SIG_TARGET 

signature target

PGPSUBTYPE_EMBEDDED_SIG 

embedded signature

PGPSUBTYPE_INTERNAL_100 

internal or user-defined

PGPSUBTYPE_INTERNAL_101 

internal or user-defined

PGPSUBTYPE_INTERNAL_102 

internal or user-defined

PGPSUBTYPE_INTERNAL_103 

internal or user-defined

PGPSUBTYPE_INTERNAL_104 

internal or user-defined

PGPSUBTYPE_INTERNAL_105 

internal or user-defined

PGPSUBTYPE_INTERNAL_106 

internal or user-defined

PGPSUBTYPE_INTERNAL_107 

internal or user-defined

PGPSUBTYPE_INTERNAL_108 

internal or user-defined

PGPSUBTYPE_INTERNAL_109 

internal or user-defined

PGPSUBTYPE_INTERNAL_110 

internal or user-defined

PGPSUBTYPE_CRITICAL 

critical subpacket marker

Definition at line 463 of file rpmpgp.h.

enum pgpTag_e

4.3.

Packet Tags

The packet tag denotes what type of packet the body holds. Note that old format headers can only have tags less than 16, whereas new format headers can have tags as great as 63.

Enumerator
PGPTAG_RESERVED 

Reserved/Invalid

PGPTAG_PUBLIC_SESSION_KEY 

Public-Key Encrypted Session Key

PGPTAG_SIGNATURE 

Signature

PGPTAG_SYMMETRIC_SESSION_KEY 

Symmetric-Key Encrypted Session Key

PGPTAG_ONEPASS_SIGNATURE 

One-Pass Signature

PGPTAG_SECRET_KEY 

Secret Key

PGPTAG_PUBLIC_KEY 

Public Key

PGPTAG_SECRET_SUBKEY 

Secret Subkey

PGPTAG_COMPRESSED_DATA 

Compressed Data

PGPTAG_SYMMETRIC_DATA 

Symmetrically Encrypted Data

PGPTAG_MARKER 

Marker

PGPTAG_LITERAL_DATA 

Literal Data

PGPTAG_TRUST 

Trust

PGPTAG_USER_ID 

User ID

PGPTAG_PUBLIC_SUBKEY 

Public Subkey

PGPTAG_COMMENT_OLD 

Comment (from OpenPGP draft)

PGPTAG_PHOTOID 

PGP's photo ID

PGPTAG_ENCRYPTED_MDC 

Integrity protected encrypted data

PGPTAG_MDC 

Manipulaion detection code packet

PGPTAG_PRIVATE_60 

Private or Experimental Values

PGPTAG_COMMENT 

Comment

PGPTAG_PRIVATE_62 

Private or Experimental Values

PGPTAG_CONTROL 

Control (GPG)

Definition at line 132 of file rpmpgp.h.

Function Documentation

static const char* _pgpHashAlgo2Name ( uint32_t  algo)
inlinestatic

Definition at line 1184 of file rpmpgp.h.

References pgpHashTbl, and pgpValStr().

Referenced by _rpmhkpDumpDigParams(), pgpsigFormat(), rpmhkpVerify(), and rpmhkpVerifySignature().

static const char* _pgpPubkeyAlgo2Name ( uint32_t  algo)
inlinestatic
static const char* _pgpSigType2Name ( uint32_t  sigtype)
inlinestatic

Definition at line 1177 of file rpmpgp.h.

References pgpSigTypeTbl, and pgpValStr().

Referenced by _rpmhkpDumpDigParams(), and rpmhkpVerify().

static const char* _pgpTag2Name ( uint32_t  tag)
inlinestatic

Definition at line 1170 of file rpmpgp.h.

References pgpTagTbl, and pgpValStr().

Referenced by rpmhkpValidate().

pgpArmor pgpArmorUnwrap ( rpmiob  iob,
rpmuint8_t **  pkt,
size_t *  pktlen 
)

Parse armored OpenPGP packets from an iob.

Parameters
iobI/O buffer
Return values
pktdearmored OpenPGP packet(s)
pktlendearmored OpenPGP packet(s) length in bytes
Returns
type of armor found

Definition at line 1564 of file rpmpgp.c.

References _free(), alloca(), crc(), PGPARMOR_ERR_BODY_DECODE, PGPARMOR_ERR_CRC_CHECK, PGPARMOR_ERR_CRC_DECODE, PGPARMOR_ERR_NO_BEGIN_PGP, PGPARMOR_ERR_NO_END_PGP, PGPARMOR_ERR_UNKNOWN_ARMOR_TYPE, PGPARMOR_FILE, PGPARMOR_MESSAGE, PGPARMOR_NONE, PGPARMOR_PRIVKEY, PGPARMOR_PUBKEY, PGPARMOR_SECKEY, PGPARMOR_SIGNATURE, PGPARMOR_SIGNED_MESSAGE, pgpCRC(), pgpGrab(), pgpIsPkt(), pgpPktLen(), PGPTAG_PUBLIC_KEY, PGPTAG_SECRET_KEY, PGPTAG_SIGNATURE, pgpValTok(), and TOKEQ.

Referenced by pgpReadPkts(), readFile(), and rpmReadPackageFile().

char* pgpArmorWrap ( rpmuint8_t  atype,
const unsigned char *  s,
size_t  ns 
)

Wrap a OpenPGP packets in ascii armor for transport.

Parameters
atypetype of armor
sbinary pkt data
nsbinary pkt data length
Returns
formatted string

Definition at line 1749 of file rpmpgp.c.

References _free(), pgpImplVecs_s::_pgpNV, pgpValStr(), stpcpy(), pgpValTbl_s::val, VERSION, and xmalloc.

Referenced by armorFormat(), processMetadataFile(), and writeRPM().

static unsigned int pgpCRC ( const rpmuint8_t octets,
size_t  len 
)
inlinestatic

Return CRC of a buffer.

Parameters
octetsbytes
lenno. of bytes
Returns
crc of buffer

Definition at line 1673 of file rpmpgp.h.

References crc(), CRC24_INIT, CRC24_POLY, and i.

Referenced by pgpArmorUnwrap().

void pgpDigClean ( pgpDig  dig)

Release (malloc'd) data from container.

Parameters
digsignature parameters container

Definition at line 1155 of file rpmpgp.c.

References _free(), and pgpImplClean().

Referenced by pgpDigFini(), and rpmVerifySignatures().

pgpDig pgpDigFree ( pgpDig  dig)

Destroy a container for parsed OpenPGP packates.

Parameters
digsignature parameters container
Returns
NULL on last dereference

Referenced by fdFini(), fdSetDig(), getSignid(), makeGPGSignature(), pgpPrtPkts(), pgpsigFormat(), rpmcliImportPubkey(), rpmhkpVerify(), rpmReadHeader(), rpmts_HdrCheck(), rpmtsCleanDig(), and specFini().

pgpDig pgpDigLink ( pgpDig  dig)

Reference a signature parameters instance.

Parameters
digsignature parameters
Returns
new signature parameters reference

Referenced by fdSetDig(), pgpDigNew(), pgpPrtPkts(), and rpmReadHeader().

pgpDig pgpDigNew ( pgpVSFlags  vsflags,
pgpPubkeyAlgo  pubkey_algo 
)

Create a container for parsed OpenPGP packates.

Generate a keypair (if requested).

Parameters
vsflagsverify signature flags (usually 0)
pubkey_algopubkey algorithm (0 disables)
Returns
container

Definition at line 1314 of file rpmpgp.c.

References digGetPool(), pgpDigLink(), pgpDigSetAlgos(), pgpDigVSFlags, pgpExportPubkey(), pgpGetPubkey(), pgpGetSignature(), pgpImplGenerate(), pgpImplInit(), and RPMVSF_DEFAULT.

Referenced by buildSpec(), getSignid(), makeGPGSignature(), pgpsigFormat(), rpmcliImportPubkey(), rpmhkpVerify(), rpmReadHeader(), rpmts_HdrCheck(), and rpmtsDig().

int pgpDigSetAlgos ( pgpDig  dig)
pgpDig pgpDigUnlink ( pgpDig  dig)

Unreference a signature parameters instance.

Parameters
digsignature parameters
Returns
NULL on last dereference
int pgpExportPubkey ( pgpDig  dig)
int pgpExportSignature ( pgpDig  dig,
DIGEST_CTX  ctx 
)
int pgpExtractPubkeyFingerprint ( const char *  b64pkt,
rpmuint8_t keyid 
)

Extract OpenPGP public key fingerprint from base64 encoded packet.

Todo:
V3 non-RSA public keys not implemented.
Parameters
b64pktbase64 encoded openpgp packet
Return values
keyid[8]public key fingerprint
Returns
8 (no. of bytes) on success, < 0 on error

Definition at line 1077 of file rpmpgp.c.

References _free(), and pgpPubkeyFingerprint().

Referenced by loadDBT().

int pgpFindPubkey ( pgpDig  dig)

Call find pubkey vector.

Parameters
digsignature parameters container
Returns
rpmRC return code

Definition at line 1464 of file rpmpgp.c.

Referenced by rpmnsProbeSignature(), verifyDSA(), verifyECDSA(), and verifyRSA().

pgpDigParams pgpGetPubkey ( const pgpDig  dig)
const void* pgpGetSig ( const pgpDig  dig)

Get signature tag data, i.e.

from header.

Parameters
digsignature parameters container
Returns
signature tag data

Definition at line 1412 of file rpmpgp.c.

Referenced by headerCheck(), pgpStashKeyid(), rpmVerifySignature(), verifyDSA(), verifyECDSA(), verifyMD5(), verifyRSA(), verifySHA1(), and verifySize().

rpmuint32_t pgpGetSiglen ( const pgpDig  dig)

Get signature tag data length, i.e.

no. of bytes of data.

Parameters
digsignature parameters container
Returns
signature tag data length

Definition at line 1417 of file rpmpgp.c.

Referenced by rpmVerifySignature(), verifyDSA(), verifyECDSA(), verifyMD5(), verifyRSA(), and verifySHA1().

pgpDigParams pgpGetSignature ( const pgpDig  dig)
rpmuint32_t pgpGetSigtag ( const pgpDig  dig)

Get signature tag.

Parameters
digsignature parameters container
Returns
signature tag

Definition at line 1402 of file rpmpgp.c.

Referenced by rpmReadPackageFile(), rpmVerifySignature(), verifyDSA(), verifyECDSA(), and verifyRSA().

rpmuint32_t pgpGetSigtype ( const pgpDig  dig)

Get signature tag type.

Parameters
digsignature parameters container
Returns
signature tag type

Definition at line 1407 of file rpmpgp.c.

static unsigned int pgpGrab ( const rpmuint8_t s,
size_t  nbytes 
)
inlinestatic

Return (native-endian) integer from big-endian representation.

Parameters
spointer to big-endian integer
nbytesno. of bytes
Returns
native-endian integer

Definition at line 1036 of file rpmpgp.h.

References i.

Referenced by _rpmhkpDumpDigParams(), pgpArmorUnwrap(), pgpLen(), pgpMpiStr(), pgpPktLen(), pgpPrtKey(), pgpPrtSig(), pgpPrtSubType(), pgpsigFormat(), pgpStashKeyid(), ppSigHash(), ppSigTime(), ppSigUnhash(), rpmhkpLoadSignature(), rpmhkpValidate(), rpmhkpVerify(), rpmkuFindPubkey(), rpmkuStorePubkey(), rpmnsProbeSignature(), and rpmtsFindPubkey().

int pgpGrabPkts ( const rpmuint8_t pkts,
size_t  pktlen,
rpmuint8_t ***  pppkts,
int *  pnpkts 
)

Return array of packet pointers.

Parameters
pktsOpenPGP packet(s)
pktlenOpenPGP packet(s) length (no. of bytes)
Return values
*pppktsarray of packet pointers
*pnpktsno. of packets
Returns
0 on success, <0 on error

Definition at line 1472 of file rpmpgp.c.

References _free(), alloca(), len, pgpPktLen(), and xcalloc().

Referenced by pgpPrtPkts(), rpmcliImportPubkey(), rpmhkpLookup(), rpmnsProbeSignature(), and rpmtsFindPubkey().

const char* pgpHashAlgo2Name ( uint32_t  algo)

Definition at line 1188 of file rpmpgp.c.

References pgpValStr().

Referenced by rpmbcSetDSA(), rpmbcSetECDSA(), rpmbcSetELG(), and rpmbcSetRSA().

pgpHashAlgo pgpHashAlgoStringToNumber ( const char *  name,
size_t  name_len 
)

Convert a hash algorithm "foo" to the internal PGPHASHALGO_FOO number.

Parameters
namename of hash algorithm
name_lenlength of name or 0 for strlen(name)
Returns
PGPHASHALGO_<name> or -1 in case of error

Definition at line 1805 of file rpmpgp.c.

References i, PGPHASHALGO_ERROR, pgpHashTbl, str, pgpValTbl_s::val, and xstrncasecmp().

Referenced by unsatisfiedDepend().

rpmuint8_t pgpHashName2Algo ( const char *  name)

Definition at line 1198 of file rpmpgp.c.

References pgpStrVal().

Referenced by pgpDigSetAlgos().

static char* pgpHexCvt ( char *  t,
const rpmuint8_t s,
size_t  nbytes 
)
inlinestatic

Convert to hex.

Parameters
ttarget buffer (returned)
ssource bytes
nbytesno. of bytes
Returns
target buffer

Definition at line 1102 of file rpmpgp.h.

References i.

Referenced by pgpHexStr(), pgpMpiStr(), verifyDSA(), verifyECDSA(), verifyMD5(), and verifyRSA().

static char* pgpHexStr ( const rpmuint8_t p,
size_t  plen 
)
inlinestatic

Return hex formatted representation of bytes.

Todo:
Remove static buffer.
Parameters
pbytes
plenno. of bytes
Returns
hex formatted string

Definition at line 1124 of file rpmpgp.h.

References pgpHexCvt().

Referenced by pgpGrabSubTagVal(), pgpPrtHex(), pgpPrtSig(), pgpsigFormat(), rpmbcMpiItem(), rpmcliImportPubkey(), rpmhkpFindKey(), rpmhkpLoadSignature(), rpmhkpUpdate(), rpmhkpValidate(), rpmhkpVerifyHash(), rpmhkpVerifySignature(), rpmReSign(), and rpmtsFindPubkey().

static int pgpImplAvailableCipher ( pgpDig  dig,
int  algo 
)
inlinestatic

Definition at line 1823 of file rpmpgp.h.

References pgpImplVecs_s::_pgpAvailableCipher.

static int pgpImplAvailableDigest ( pgpDig  dig,
int  algo 
)
inlinestatic

Definition at line 1834 of file rpmpgp.h.

References pgpImplVecs_s::_pgpAvailableDigest.

static int pgpImplAvailablePubkey ( pgpDig  dig,
int  algo 
)
inlinestatic

Definition at line 1845 of file rpmpgp.h.

References pgpImplVecs_s::_pgpAvailablePubkey.

static void pgpImplClean ( void *  impl)
inlinestatic

Definition at line 1899 of file rpmpgp.h.

References pgpImplVecs_s::_pgpClean.

Referenced by pgpDigClean().

static int pgpImplErrChk ( pgpDig  dig,
const char *  msg,
int  rc,
unsigned  expected 
)
inlinestatic

Definition at line 1812 of file rpmpgp.h.

References pgpImplVecs_s::_pgpErrChk.

static void* pgpImplFree ( void *  impl)
inlinestatic

Definition at line 1911 of file rpmpgp.h.

References pgpImplVecs_s::_pgpFree.

Referenced by pgpDigFini().

static int pgpImplGenerate ( pgpDig  dig)
inlinestatic

Definition at line 1878 of file rpmpgp.h.

References pgpImplVecs_s::_pgpGenerate.

Referenced by buildSpec(), and pgpDigNew().

static void* pgpImplInit ( void  )
inlinestatic

Definition at line 1920 of file rpmpgp.h.

References pgpImplVecs_s::_pgpInit.

Referenced by pgpDigNew().

static int pgpImplMpiItem ( const char *  pre,
pgpDig  dig,
int  itemno,
const rpmuint8_t p,
const rpmuint8_t pend 
)
inlinestatic

Definition at line 1889 of file rpmpgp.h.

References pgpImplVecs_s::_pgpMpiItem.

Referenced by pgpPrtPubkeyParams(), and pgpPrtSigParams().

static int pgpImplSetDSA ( DIGEST_CTX  ctx,
pgpDig  dig,
pgpDigParams  sigp 
)
inlinestatic
static int pgpImplSetECDSA ( DIGEST_CTX  ctx,
pgpDig  dig,
pgpDigParams  sigp 
)
inlinestatic
static int pgpImplSetELG ( DIGEST_CTX  ctx,
pgpDig  dig,
pgpDigParams  sigp 
)
inlinestatic

Definition at line 1794 of file rpmpgp.h.

References pgpImplVecs_s::_pgpSetELG.

static int pgpImplSetRSA ( DIGEST_CTX  ctx,
pgpDig  dig,
pgpDigParams  sigp 
)
inlinestatic
static int pgpImplSign ( pgpDig  dig)
inlinestatic

Definition at line 1867 of file rpmpgp.h.

References pgpImplVecs_s::_pgpSign.

Referenced by rpmbcExportSignature().

static int pgpImplVerify ( pgpDig  dig)
inlinestatic
static int pgpIsPkt ( const rpmuint8_t p,
pgpTag tagp 
)
inlinestatic
static unsigned int pgpLen ( const rpmuint8_t s,
unsigned int *  lenp 
)
inlinestatic

Return length of an OpenPGP packet.

Parameters
spointer to packet
Return values
*lenpno. of bytes in packet
Returns
no. of bytes in length prefix

Definition at line 1053 of file rpmpgp.h.

References pgpGrab().

Referenced by pgpGrabSubTagVal(), pgpPktLen(), pgpPrtSubType(), and pgpsigFormat().

static unsigned int pgpMpiBits ( const rpmuint8_t p)
inlinestatic

Return no.

of bits in a multiprecision integer.

Parameters
ppointer to multiprecision integer
Returns
no. of bits

Definition at line 1074 of file rpmpgp.h.

Referenced by pgpMpiLen(), and rpmbcMpiItem().

static unsigned int pgpMpiLen ( const rpmuint8_t p)
inlinestatic

Return no.

of bytes in a multiprecision integer.

Parameters
ppointer to multiprecision integer
Returns
no. of bytes

Definition at line 1087 of file rpmpgp.h.

References pgpMpiBits().

Referenced by pgpMpiStr(), pgpPrtPubkeyParams(), pgpPrtSeckeyParams(), pgpPrtSigParams(), pgpPubkeyFingerprint(), and rpmbcMpiItem().

static const char* pgpMpiStr ( const rpmuint8_t p)
inlinestatic

Return hex formatted representation of a multiprecision integer.

Todo:
Remove static buffer.
Parameters
pbytes
Returns
hex formatted string

Definition at line 1140 of file rpmpgp.h.

References pgpGrab(), pgpHexCvt(), and pgpMpiLen().

Referenced by pgpPrtPubkeyParams(), pgpPrtSeckeyParams(), and pgpPrtSigParams().

int pgpPrtPkt ( const rpmuint8_t pkt,
size_t  pleft 
)

Return lenth of a OpenPGP packet.

Parameters
pktOpenPGP packet (i.e. PGPTAG_PUBLIC_KEY)
pleftOpenPGP packet length (no. of bytes)
Return values
pppacket tag/ptr/len
Returns
packet length, <0 on error. Print/parse next OpenPGP packet.
Parameters
pktOpenPGP packet
pleftno. bytes remaining
Returns
-1 on error, otherwise this packet length

Definition at line 1089 of file rpmpgp.c.

References alloca(), pgpPktLen(), pgpPrtComment(), pgpPrtHex(), pgpPrtKey(), pgpPrtNL(), pgpPrtSig(), pgpPrtUserID(), pgpPrtVal(), pgpPubkeyFingerprint(), PGPTAG_COMMENT, PGPTAG_COMMENT_OLD, PGPTAG_COMPRESSED_DATA, PGPTAG_CONTROL, PGPTAG_ENCRYPTED_MDC, PGPTAG_LITERAL_DATA, PGPTAG_MARKER, PGPTAG_MDC, PGPTAG_PHOTOID, PGPTAG_PRIVATE_60, PGPTAG_PRIVATE_62, PGPTAG_PUBLIC_KEY, PGPTAG_PUBLIC_SESSION_KEY, PGPTAG_PUBLIC_SUBKEY, PGPTAG_RESERVED, PGPTAG_SECRET_KEY, PGPTAG_SECRET_SUBKEY, PGPTAG_SIGNATURE, PGPTAG_SYMMETRIC_DATA, PGPTAG_SYMMETRIC_SESSION_KEY, PGPTAG_TRUST, and PGPTAG_USER_ID.

Referenced by pgpPrtPkts().

int pgpPrtPkts ( const rpmuint8_t pkts,
size_t  pktlen,
pgpDig  dig,
int  printing 
)

Print/parse a OpenPGP packet(s).

Parameters
pktsOpenPGP packet(s)
pktlenOpenPGP packet(s) length (no. of bytes)
Return values
digparsed output of signature/pubkey packet parameters
Parameters
printingshould packets be printed?
Returns
-1 on error, 0 on success

Definition at line 1518 of file rpmpgp.c.

References _free(), alloca(), i, len, pgpDigFree(), pgpDigLink(), pgpGrabPkts(), pgpPktLen(), pgpPrtPkt(), PGPTAG_SIGNATURE, and pgpValTbl_s::val.

Referenced by makeGPGSignature(), pgpsigFormat(), rpmnsProbeSignature(), and rpmts_PgpPrtPkts().

void pgpPrtVal ( const char *  pre,
pgpValTbl  vs,
rpmuint8_t  val 
)

Print an OpenPGP value.

Parameters
preoutput prefix
vstable of (string,value) pairs
valbyte value to print

Definition at line 302 of file rpmpgp.c.

References pgpValStr().

Referenced by pgpPrtComment(), pgpPrtKey(), pgpPrtPkt(), pgpPrtSeckeyParams(), pgpPrtSig(), pgpPrtSubType(), and pgpPrtUserID().

const char* pgpPubkeyAlgo2Name ( uint32_t  algo)

Definition at line 1193 of file rpmpgp.c.

References pgpValStr().

Referenced by rpmbcSetDSA(), rpmbcSetECDSA(), rpmbcSetELG(), and rpmbcSetRSA().

int pgpPubkeyFingerprint ( const rpmuint8_t pkt,
size_t  pktlen,
rpmuint8_t keyid 
)

Print/parse an OpenPGP subtype packet.

Parameters
hpacket
hlenpacket length (no. of bytes)
sigtypesignature type
Returns
0 on success Print/parse an OpenPGP signature packet.
Parameters
pppacket tag/ptr/len
Returns
0 on success Print/parse an OpenPGP key packet.
Parameters
pppacket tag/ptr/len
Returns
0 on success Print/parse an OpenPGP userid packet.
Parameters
pppacket tag/ptr/len
Returns
0 on success Print/parse an OpenPGP comment packet.
Parameters
pppacket tag/ptr/len
Returns
0 on success Calculate OpenPGP public key fingerprint.
Todo:
V3 non-RSA public keys not implemented.
Parameters
pktOpenPGP packet (i.e. PGPTAG_PUBLIC_KEY)
pktlenOpenPGP packet length (no. of bytes)
Return values
keyidpublick key fingerprint
Returns
0 on success, else -1

Definition at line 1029 of file rpmpgp.c.

References _free(), alloca(), d, PGPHASHALGO_SHA1, pgpMpiLen(), pgpPktLen(), PGPPUBKEYALGO_RSA, PGPTAG_PUBLIC_KEY, PGPTAG_PUBLIC_SUBKEY, pgpPktKeyV3_s::pubkey_algo, RPMDIGEST_NONE, rpmDigestFinal(), rpmDigestInit(), rpmDigestUpdate(), and v.

Referenced by pgpExtractPubkeyFingerprint(), pgpPrtPkt(), rpmbcExportPubkey(), rpmcliImportPubkey(), rpmhkpLookup(), rpmhkpValidate(), rpmnsProbeSignature(), and rpmtsFindPubkey().

rpmuint8_t pgpPubkeyName2Algo ( const char *  name)

Definition at line 1203 of file rpmpgp.c.

References pgpStrVal().

Referenced by pgpDigSetAlgos().

pgpArmor pgpReadPkts ( const char *  fn,
rpmuint8_t **  pkt,
size_t *  pktlen 
)

Parse armored OpenPGP packets from a file.

Parameters
fnfile name
Return values
pktdearmored OpenPGP packet(s)
pktlendearmored OpenPGP packet(s) length in bytes
Returns
type of armor found

Definition at line 1739 of file rpmpgp.c.

References PGPARMOR_ERR_NO_BEGIN_PGP, pgpArmorUnwrap(), rpmiobFree(), and rpmiobSlurp().

Referenced by processMetadataFile(), rpmcliImportPubkeys(), rpmhkpLookup(), rpmnsProbeSignature(), and rpmtsFindPubkey().

int pgpSetFindPubkey ( pgpDig  dig,
int(*)(void *ts, void *dig)  findPubkey,
void *  _ts 
)

Set find pubkey vector.

Parameters
digsignature parameters container
findPubkeyroutine to find a pubkey.
_tsargument to (*findPubkey) (ts, ...)
Returns
0 always

Definition at line 1450 of file rpmpgp.c.

Referenced by rpmtsDig().

int pgpSetSig ( pgpDig  dig,
rpmuint32_t  sigtag,
rpmuint32_t  sigtype,
const void *  sig,
rpmuint32_t  siglen 
)

Set signature tag info, i.e.

from header.

Parameters
digsignature parameters container
sigtagsignature tag
sigtypesignature tag type
sigsignature tag data
siglensignature tag data length
Returns
0 always

Definition at line 1422 of file rpmpgp.c.

Referenced by headerCheck(), rpmReadPackageFile(), and rpmVerifySignatures().

void* pgpStatsAccumulator ( pgpDig  dig,
int  opx 
)

Return pgpDig container accumulator structure.

Parameters
digsignature parameters container
opxper-container accumulator index (aka rpmtsOpX)
Returns
per-container accumulator pointer

Definition at line 1436 of file rpmpgp.c.

Referenced by hBlobDigest(), rpmReadPackageFile(), rpmtsCleanDig(), verifyDSA(), verifyECDSA(), verifyMD5(), verifyRSA(), and verifySHA1().

static rpmuint8_t pgpStrVal ( pgpValTbl  vs,
const char *  str 
)
inlinestatic

Return byte value of an OpenPGP string.

Parameters
vstable of (string,value) pairs
strstring to lookup
Returns
byte (or 0 on failure)

Definition at line 1204 of file rpmpgp.h.

References pgpValTbl_s::str, and pgpValTbl_s::val.

Referenced by pgpHashName2Algo(), and pgpPubkeyName2Algo().

static const char* pgpValStr ( pgpValTbl  vs,
rpmuint8_t  val 
)
inlinestatic

Return string representation of an OpenPGP value.

Parameters
vstable of (string,value) pairs
valbyte value to lookup
Returns
string

Definition at line 1159 of file rpmpgp.h.

References pgpValTbl_s::str, and pgpValTbl_s::val.

Referenced by _pgpHashAlgo2Name(), _pgpPubkeyAlgo2Name(), _pgpSigType2Name(), _pgpTag2Name(), pgpArmorWrap(), pgpHashAlgo2Name(), pgpPrtVal(), and pgpPubkeyAlgo2Name().

static int pgpValTok ( pgpValTbl  vs,
const char *  s,
const char *  se 
)
inlinestatic

Return value of an OpenPGP string.

Parameters
vstable of (string,value) pairs
sstring token to lookup
seend-of-string address
Returns
byte value

Definition at line 1222 of file rpmpgp.h.

References pgpValTbl_s::str, and pgpValTbl_s::val.

Referenced by pgpArmorUnwrap().

Variable Documentation

struct pgpValTbl_s pgpArmorKeyTbl[]

Armor key (string, value) pairs.

Definition at line 255 of file rpmpgp.c.

struct pgpValTbl_s pgpArmorTbl[]

Armor (string, value) pairs.

Definition at line 244 of file rpmpgp.c.

struct pgpValTbl_s pgpCompressionTbl[]

Compression (string, value) pairs.

Definition at line 148 of file rpmpgp.c.

pgpVSFlags pgpDigVSFlags

Disabler bits(s) for signature/digest checking.

Definition at line 1153 of file rpmpgp.c.

Referenced by headerCheck(), pgpDigNew(), rpmcliAllArgCallback(), rpmReadPackageFile(), rpmtsSetVSFlags(), and rpmtsVSFlags().

struct pgpValTbl_s pgpHashTbl[]

Hash (string, value) pairs.

Definition at line 156 of file rpmpgp.c.

Referenced by _pgpHashAlgo2Name(), and pgpHashAlgoStringToNumber().

pgpImplVecs_t* pgpImplVecs

Definition at line 51 of file rpmpgp.c.

Referenced by rpmioAllArgCallback().

struct pgpValTbl_s pgpPubkeyTbl[]

Definition at line 116 of file rpmpgp.c.

Referenced by _pgpPubkeyAlgo2Name().

struct pgpValTbl_s pgpSigTypeTbl[]

Definition at line 97 of file rpmpgp.c.

Referenced by _pgpSigType2Name().

struct pgpValTbl_s pgpSubTypeTbl[]

Subtype (string, value) pairs.

Definition at line 178 of file rpmpgp.c.

struct pgpValTbl_s pgpSymkeyTbl[]

Symmetric key (string, value) pairs.

Definition at line 129 of file rpmpgp.c.

struct pgpValTbl_s pgpTagTbl[]

Definition at line 218 of file rpmpgp.c.

Referenced by _pgpTag2Name().