From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 4B9F0138334 for ; Sun, 29 Jul 2018 20:51:11 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 44758E0951; Sun, 29 Jul 2018 20:51:09 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 0D683E0951 for ; Sun, 29 Jul 2018 20:51:08 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 3F1BB335C9F for ; Sun, 29 Jul 2018 20:51:07 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 04A3D392 for ; Sun, 29 Jul 2018 20:51:04 +0000 (UTC) From: "Michał Górny" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Michał Górny" Message-ID: <1532894846.ca614436fb25aed6a33d914a26cc0fb4618712ff.mgorny@gentoo> Subject: [gentoo-commits] data/glep:master commit in: / X-VCS-Repository: data/glep X-VCS-Files: glep-0063.rst X-VCS-Directories: / X-VCS-Committer: mgorny X-VCS-Committer-Name: Michał Górny X-VCS-Revision: ca614436fb25aed6a33d914a26cc0fb4618712ff X-VCS-Branch: master Date: Sun, 29 Jul 2018 20:51:04 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 802ee8ee-2148-4752-a84f-a6913046177c X-Archives-Hash: 186364b58172b13f5d1314dbc2d23a13 commit: ca614436fb25aed6a33d914a26cc0fb4618712ff Author: Michał Górny gentoo org> AuthorDate: Wed Jul 4 07:21:51 2018 +0000 Commit: Michał Górny gentoo org> CommitDate: Sun Jul 29 20:07:26 2018 +0000 URL: https://gitweb.gentoo.org/data/glep.git/commit/?id=ca614436 glep-0063: Allow ECC curve 25519 keys Optionally allow using ECC curve 25519 keys. We already have developers using those keys, and given that they are supported by GnuPG 2.2, there's probably no reason to ban them. However, they're not recommended due to interoperability issues. glep-0063.rst | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/glep-0063.rst b/glep-0063.rst index fb09dd8..2402c34 100644 --- a/glep-0063.rst +++ b/glep-0063.rst @@ -34,6 +34,8 @@ v1.1 The larger recommendation was unjustified and resulted in people unnecessarily replacing their RSA-2048 keys. + Minimal specification has been amended to allow for ECC keys. + Motivation ========== @@ -68,6 +70,8 @@ not be used to commit. b. RSA, >=2048 bits (OpenPGP v4 key format or later only) + c. ECC curve 25519 + 4. Key expiry: 5 years maximum 5. Upload your key to the SKS keyserver rotation before usage!