x/crypto/openpgp: add ECC support #22015

emersion · 2017-09-25T10:23:49Z

It's supported in GnuPG 2.2.x and standardized in https://tools.ietf.org/html/rfc6637

Merovius · 2018-09-27T00:33:19Z

@emersion Can you be more specific? The package already supports ECDSA/ECDH using the NIST curves. There is an open issue to implement EdDSA at #18576. ISTM that this should either be duped against that latter ticket, or is already done. Unless I'm missing something obvious :) Can you provide a use-case not covered yet (e.g. a key that isn't usable)?

dijit · 2018-10-19T14:29:35Z

I have a key that is not usable.

$ go version
go version go1.11.1 linux/amd64

my version of golang.org/x/crypto/openpgp is from commit 0c41d7a

2018/10/19 16:26:43 encryptString: openpgp: unsupported feature: public key type: 22

Merovius · 2018-10-19T22:00:41Z

Yes, that's an Ed25519 key, so this is a duplicate of #18576

emersion · 2018-10-19T22:05:29Z

Honestly I don't remember the exact key that made me open this issue. Let's assume it was a duplicate of #18576.

antong · 2019-02-26T10:59:35Z

@Merovius , when you say the package supports ECDH using the NIST curves, can you point to where this is implemented and how can it be used? I'm asking because this was raised in #30388 and I can't find out how to encrypt to a ECDH public key.

// From https://sites.google.com/site/brainhub/pgpecckeys#TOC-ECC-NIST-P-384-key
var pubkey = `
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP Command Line v10.2.0 (Linux)

mQBvBE1TBZITBSuBBAAiAwME9rjFrO1bhO+fSiCdsuSp37cNKMuMEOzVdnSp+lpn
OJlCti1eUTZ99Me/0/jlAP7s8H7SZaYhqOu75T6UfseMZ366FDvRUzwrNQ4cKfgj
E+HhEI66Bjvh5ksQ5pUOeZwttCRlY19kc2FfZGhfMzg0IDxvcGVucGdwQGJyYWlu
aHViLm9yZz6JAMsEEBMJAFMFAk1TBZIwFIAAAAAAIAAHcHJlZmVycmVkLWVtYWls
LWVuY29kaW5nQHBncC5jb21wZ3BtaW1lBAsJCAcCGQEFGwMAAAACFgIFHgEAAAAE
FQkKCAAKCRAJgDOID1Rxn8orAYCqNzUJaL1fEVr9jOe8exA4IhUtv/BtCvzag1Mp
UQkFuYy0abogj6q4fHQSt5nntjMBf1g2TqSA6KGj8lOgxfIsRG6L6an85iEBNu4w
gRq71JE53ii1vfjcNtBq50hXnp/1A7kAcwRNUwWSEgUrgQQAIgMDBC+qhAJKILZz
XEiX76W/tBv4W37v6rXKDLn/yOoEpGrLJVNKV3aU+eJTQKSrUiOp3R7aUwyKouZx
jbENfmclWMdzb+CTaepXOaKjVUvxbUH6pQVi8RxtObvV3/trmp7JGAMBCQmJAIQE
GBMJAAwFAk1TBZIFGwwAAAAACgkQCYAziA9UcZ+AlwGA7uem2PzuQe5PkonfF/m8
+dlV3KJcWDuUM286Ky1Jhtxc9Be40tyG90Gp4abSNsDjAX0cdldUWKDPuTroorJ0
/MZc7s16ke7INla6EyGZafBpRbSMVr0EFSw6BVPF8vS9Emc=
=I76R
-----END PGP PUBLIC KEY BLOCK-----
`

func main() {
	entities, err := openpgp.ReadArmoredKeyRing(strings.NewReader(pubkey))
	if err != nil {
		panic(err)
	}

	buf := new(bytes.Buffer)
	a, err := armor.Encode(buf, "PGP MESSAGE", nil)
	if err != nil {
		panic(err)
	}
	w, err := openpgp.Encrypt(a, entities, nil, nil, nil)
	if err != nil {
		fmt.Println("ERR:", err)
		return
	}
	w.Write([]byte("Hello"))
	w.Close()
	a.Close()
	fmt.Println(buf.String())

	// Output:
	// ERR: openpgp: invalid argument: cannot encrypt a message to key id 98033880f54719f because it has no encryption keys
}

EDIT: Just to add, you can successfully encrypt to this with gpg and also the github.com/keybase/go-crypto/openpgp fork.

Merovius · 2019-02-26T12:07:13Z

@antong You are correct :) I was oblivious to the fact that there is a standard to use ECDSA keys for encryption (in combination with ECDH) - I was only considering their use for signatures.

gopherbot added this to the Unreleased milestone Sep 25, 2017

emersion closed this as completed Oct 19, 2018

antong mentioned this issue Feb 26, 2019

x/crypto/openpgp: Cannot encrypt with ECDSA #30388

Closed

golang locked and limited conversation to collaborators Feb 26, 2020

gopherbot added the FrozenDueToAge label Feb 26, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

x/crypto/openpgp: add ECC support #22015

x/crypto/openpgp: add ECC support #22015

emersion commented Sep 25, 2017

Merovius commented Sep 27, 2018

dijit commented Oct 19, 2018 •

edited

Merovius commented Oct 19, 2018 •

edited

emersion commented Oct 19, 2018

antong commented Feb 26, 2019 •

edited

Merovius commented Feb 26, 2019

x/crypto/openpgp: add ECC support #22015

x/crypto/openpgp: add ECC support #22015

Comments

emersion commented Sep 25, 2017

Merovius commented Sep 27, 2018

dijit commented Oct 19, 2018 • edited

Merovius commented Oct 19, 2018 • edited

emersion commented Oct 19, 2018

antong commented Feb 26, 2019 • edited

Merovius commented Feb 26, 2019

dijit commented Oct 19, 2018 •

edited

Merovius commented Oct 19, 2018 •

edited

antong commented Feb 26, 2019 •

edited