[Pkg-gnupg-commit] [gnupg2] 29/185: common: Improve checking for compliance with CO_DE_VS.

[Daniel Kahn Gillmor]

This is an automated email from the git hooks/post-receive script.

dkg pushed a commit to branch experimental
in repository gnupg2.

commit 3b70f62423041e614332b90d782576ee6868a030
Author: Justus Winter <justus at g10code.com>
Date:   Thu Jun 1 11:56:42 2017 +0200

    common: Improve checking for compliance with CO_DE_VS.
    
    * common/compliance.c (gnupg_pk_is_compliant): Only certain RSA key
    sizes are compliant.
    
    Signed-off-by: Justus Winter <justus at g10code.com>
---
 common/compliance.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/common/compliance.c b/common/compliance.c
index 73c7ad7..c0b6984 100644
--- a/common/compliance.c
+++ b/common/compliance.c
@@ -86,7 +86,9 @@ gnupg_pk_is_compliant (enum gnupg_compliance_mode compliance, int algo,
           break;
 
         case is_rsa:
-          result = (keylength >= 2048);
+          result = (keylength == 2048
+                    || keylength == 3072
+                    || keylength == 4096);
           break;
 
         case is_ecc:

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-gnupg/gnupg2.git