diff options
Diffstat (limited to 'doc/DETAILS')
| -rw-r--r-- | doc/DETAILS | 69 |
1 files changed, 68 insertions, 1 deletions
diff --git a/doc/DETAILS b/doc/DETAILS index 420f67d..e064c9d 100644 --- a/doc/DETAILS +++ b/doc/DETAILS @@ -192,6 +192,9 @@ described here. - s :: Sign - c :: Certify - a :: Authentication + - r :: Restricted encryption (subkey only use) + - t :: Timestamping + - g :: Group key - ? :: Unknown capability A key may have any combination of them in any order. In addition @@ -1103,7 +1106,13 @@ pkd:0:1024:B665B1435F4C2 .... FF26ABB: - learncard :: Send by the agent and gpgsm while learing the data of a smartcard. - card_busy :: A smartcard is still working - - scd_locked :: Waiting for other clients to unlock the scdaemon + - scd_locked :: Waiting for other clients to unlock the + scdaemon + - gpgtar :: Here <char> has a special meaning: 's' + indicates total size and 'c' file count. A + <total> of zero indicates that gpgtar is in the + scanning phase. A positive <total> is used in + the writing phase. When <what> refers to a file path, it may be truncated. @@ -1129,6 +1138,17 @@ pkd:0:1024:B665B1435F4C2 .... FF26ABB: send to the client instead of this status line. Such an inquiry may be used to sync with Pinentry +*** GPGTAR_EXTRACT <tot> <skp> <bad> <sus> <sym> <hrd> <oth> + This status line is emitted after gpgtar has extracted files. + + - tot :: Total number of files extracted and stored + - skp :: Total number of files skipped during extraction + - bad :: Number of files skipped due to a bad file name + - sus :: Number of files skipped due to a suspicious file name + - sym :: Number of symlinks not restored + - hrd :: Number of hard links not restored + - oth :: Number of files not extracted due to other reasons. + ** Obsolete status codes *** SIGEXPIRED Removed on 2011-02-04. This is deprecated in favor of KEYEXPIRED. @@ -1174,6 +1194,20 @@ pkd:0:1024:B665B1435F4C2 .... FF26ABB: name of the manufacturer is also given as <string>; spaces are not escaped. For PKCS#15 cards <string> is TokenInfo.manufactorerID. +*** KEY-STATUS <keyref> <status> + This is the response from scdaemon on GETATTR KEY-STATUS for + OpenPGP cards. <keyref> is the usual keyref (e.g. OPENPGP.1 or + OPENPGP.129) and <status> is an integer describing the status of + the key: 0 = key is not present, 1 = key generated on card, 2 = + key imported. See section 4.4.3.8 of the OpenPGP Smart Card + Application V3.4. + +*** KEY-ATTR-INFO <keyref> <string> + This is the response from scdaemon on GETATTR KEY-ATTR-INFO for + OpenPGP cards. <keyref> is the usual keyref (e.g. OPENPGP.1 or + OPENPGP.129) and <string> is the algoritm or curve name, which + is available for the key. + * Format of the --attribute-fd output When --attribute-fd is set, during key listings (--list-keys, @@ -1540,6 +1574,37 @@ Description of some debug flags: * Miscellaneous notes +** List of useful RFCs and I-D. + - RFC-1423 :: PEM, Part III: Algorithms, Modes, and Identifiers + - RFC-1750 :: Randomness Recommendations for Security + - RFC-1991 :: PGP Message Exchange Formats (obsolete) + - RFC-2144 :: The CAST-128 Encryption Algorithm + - RFC-2279 :: UTF-8, a transformation format of ISO 10646 + - RFC-2440 :: OpenPGP (obsolete). + - RFC-3156 :: MIME Security with Pretty Good Privacy (PGP). + - RFC-3447 :: PKCS #1: RSA Cryptography Specifications Version 2.1 + - RFC-4880 :: OpenPGP + - RFC-5083 :: CMS - Authenticated-Enveloped-Data + - RFC-5084 :: CMS - AES-GCM + - RFC-5280 :: X.509 PKI Certificate and CRL Profile + - RFC-5480 :: ECC Subject Public Key Information + - RFC-5639 :: ECC Brainpool Standard Curves + - RFC-5652 :: CMS (STD0070) + - RFC-5753 :: ECC in CMS + - RFC-5758 :: CMS - Additional Algorithms for DSA and ECDSA + - RFC-6818 :: Updates to the X.509 PKI Certificate and CRL Profile + - RFC-6960 :: Online Certificate Status Protocol - OCSP + - RFC-8954 :: Online Certificate Status Protocol (OCSP) Nonce Extension + - RFC-8398 :: Internationalized Email Addresses in X.509 Certificates + - RFC-8399 :: Internationalization Updates to RFC 5280 + - RFC-8813 :: Clarifications for ECC Subject Public Key + - RFC-5915 :: ECC Private Key Structure + - RFC-5958 :: Asymmetric Key Packages + - RFC-6337 :: ECC in OpenPGP + - RFC-7292 :: PKCS #12: Personal Information Exchange Syntax v1.1 + - RFC-8351 :: The PKCS #8 EncryptedPrivateKeyInfo Media Type + + - draft-koch-openpgp-2015-rfc4880bis :: Updates to RFC-4880 ** v3 fingerprints For packet version 3 we calculate the keyids this way: @@ -1548,6 +1613,8 @@ Description of some debug flags: calculate a RMD160 hash value from it. This is used as the fingerprint and the low 64 bits are the keyid. +** gnupg.org notations + ** Simplified revocation certificates Revocation certificates consist only of the signature packet; "--import" knows how to handle this. The rationale behind it is to |