Bug#643933: GPG keysize must be greater than 1024 bits

September 30th, 2011 - 05:40 pm ET by Luca Falavigna | Report spam
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
boundary="050204080303010908090905"

This is a multi-part message in MIME format.

Package: developers-reference
Version: 3.4.6
Severity: normal
Tags: patch


Keyring maintainers explicitly asked to provide GPG keys greater than
1024 bits [0], while page 4 currently states key must be at least 1024.

Attached patch should solve this, by rephrasing the sentence stating
keys must be greater than 1024 bits.

[0] <20090520092534.GG22906@earth.li>

.''`.
: :' : Luca Falavigna <dktrkranz@debian.org>
`. `'
`-

name="gpg-length.patch"
filename="gpg-length.patch"

Index: new-maintainer.dbk
=
new-maintainer.dbk (revisione 8928)
+++ new-maintainer.dbk (copia locale)
@@ -155,7 +155,7 @@
</para>
<para>
You need a version 4 key for use in Debian Development. Your key length must
-be at least 1024 bits; there is no reason to use a smaller key, and doing so
+be greater than 1024 bits; there is no reason to use a smaller key, and doing so
would be much less secure.<footnote><para> Version 4 keys are keys conforming
to the OpenPGP standard as defined in RFC 2440. Version 4 is the key type that
has always been created when using GnuPG. PGP versions since 5.x also could







To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
email Follow the discussionReplies 1 replyReplies Make a reply

Replies

#1 Charles Plessy
September 30th, 2011 - 08:00 pm ET | Report spam
Le Fri, Sep 30, 2011 at 11:21:51PM +0200, Luca Falavigna a écrit :

Keyring maintainers explicitly asked to provide GPG keys greater than
1024 bits [0], while page 4 currently states key must be at least 1024.

Attached patch should solve this, by rephrasing the sentence stating
keys must be greater than 1024 bits.

[0]

Index: new-maintainer.dbk
> new-maintainer.dbk (revisione 8928)
+++ new-maintainer.dbk (copia locale)
@@ -155,7 +155,7 @@
</para>
<para>
You need a version 4 key for use in Debian Development. Your key length must
-be at least 1024 bits; there is no reason to use a smaller key, and doing so
+be greater than 1024 bits; there is no reason to use a smaller key, and doing so
would be much less secure.<footnote><para> Version 4 keys are keys conforming
to the OpenPGP standard as defined in RFC 2440. Version 4 is the key type that
has always been created when using GnuPG. PGP versions since 5.x also could



Seconded. Perhaps the announce could be linked, like:

<ulink url="http://lists.debian.org/">Your key length must be greater than 1024 bits</ulink>.

Cheers,

Charles Plessy
Tsurumi, Kanagawa, Japan



To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact

Similar topics