GnuPG 2.1.7 released (with Curve25519 support)
Yutaka Niibe at
Now, we can use Ed25519 (for signing) together with Curve25519. Latter requires libgcrypt development version, currently, though.
Working on this and I was not sure if it will be ready, I missed the opportunity for the key signing party at Debconf15.
In any case, I will bring my name card with my GPG fingerprint. So, please feel free to ask me the card at Debconf15.
I'm going to generate new keys with Ed25519 and Curve25519. And I'll write down the GPG signature on the card.
uıɐɾ ʞ ʇɐɯɐs, testbeta, Claes Wallin (韋嘉誠), Bernhard E. Reiter likes this.
Claes Wallin (韋嘉誠), Claes Wallin (韋嘉誠), Bernhard E. Reiter shared this.
Ed25519 is for signing or authentication. This curve is already available in OpenSSH (for authentication). Curve25519 is for encryption/decription.
Ed25519 has been available in GnuPG 2.1, but Curve25519 was not available.
Usually, we have a primary key for signing and certification (certification means signing someone's key in OpenPGP) and a subkey for encryption/decryption.
Now, Curve25519 is there in GnuPG 2.1.7. It means that we can create key of primary Ed25519 key and sub Curve25519 key.
Ed25519/Curve25519 is important because the curve is considered "safe" (if we compare somehow classic ECC of NIST P-256 or secp256k1).
Yutaka Niibe at 2015-08-12T10:59:54Z
uıɐɾ ʞ ʇɐɯɐs likes this.
1. Tor Browser 5.0 stable https://www.torproject.org/projects/torbrowser.html.en#downloads and 5.5a1 (alpha) https://www.torproject.org/projects/torbrowser.html.en#downloads-alpha; https://blog.torproject.org/blog/tor-browser-55a1-released
2. Tails 1.5 https://tails.boum.org/download/index.en.html; https://git-tails.immerda.ch/tails/plain/debian/changelog
testbeta at 2015-08-12T15:05:36Z
Yutaka Niibe likes this.