Gentoo Archives: gentoo-dev

From: "Michał Górny" <mgorny@g.o>
To: gentoo-dev@l.g.o
Cc: robbat2@g.o, "Michał Górny" <mgorny@g.o>
Subject: [gentoo-dev] [PATCH v2 07/11] glep-0063: Allow ECC, curve 25519 keys
Date: Wed, 04 Jul 2018 10:27:14
Message-Id: 20180704102401.29512-8-mgorny@gentoo.org
In Reply to: [gentoo-dev] [PATCH v2 00/11] Major GLEP 63 update by "Michał Górny"
1 Optionally allow using ECC, curve 25519 keys. We already have
2 developers using those keys, and given that they are supported
3 by GnuPG 2.2, there's probably no reason to ban them. However, they're
4 not recommended due to interoperability issues.
5 ---
6 glep-0063.rst | 4 ++++
7 1 file changed, 4 insertions(+)
8
9 diff --git a/glep-0063.rst b/glep-0063.rst
10 index 6dc4ce5..ab7cb79 100644
11 --- a/glep-0063.rst
12 +++ b/glep-0063.rst
13 @@ -33,6 +33,8 @@ v1.1
14 The larger recommendation was unjustified and resulted in people
15 unnecessarily replacing their RSA-2048 keys.
16
17 + Minimal specification has been amended to allow for ECC keys.
18 +
19 Motivation
20 ==========
21
22 @@ -64,6 +66,8 @@ not be used to commit.
23
24 b. RSA, >=2048 bits (OpenPGP v4 key format or later only)
25
26 + c. ECC, curve 25519
27 +
28 3. Key expiry: 5 years maximum
29
30 4. Upload your key to the SKS keyserver rotation before usage!
31 --
32 2.18.0

Replies