OpenPGP.generate() pub key is unusable in other openpgp libraries

michep commented 1 year ago

Hello @jerson

on version 3.7.1 I do something like this:

var keypair = await OpenPGP.generate();
await updateAgentPublicKey(keypair.publicKey); // sends pubkey to the server, where it is verified and checked

And serverside pubkey verification give an error:

"ValueError: 39 is not a valid backing value for enum OpenPGP\Enum\SignatureSubpacketType"

michep commented 1 year ago

here is my newly generated pubkey:

jerson commented 1 year ago

Hi @michep could you give me more info about which library or language was you using, it seems a compatibility issue with a new specific feature

michep commented 1 year ago

https://packagist.org/packages/php-privacy/openpgp

michep commented 1 year ago

Hi @jerson, here is fancy PGP message decoder - https://cirw.in/gpg-decoder

And if you feed in a pubkey, generated with updated binaries, you will see unknown subpacket type, which is exactly 39:

Signature Packet (0x2)
  ...
  subpackets:
  ...
    subpacketType:"undefined (0x27)"
    data:"0702"

If you generate pubkey with version 3.6.1 or 3.7.0, same part of decoded key will have:

Signature Packet (0x2)
  ...
  subpackets:
  ...
    subpacketType:"Preferred AEAD Algorithms (0x22)"
    data:"01"

gladius-opensort commented 12 months ago

Hi Jerson,

Noticing the same issue

jerson commented 12 months ago

hi @michep , @gladius-opensort could you try with this new branch please https://github.com/jerson/flutter-openpgp/pull/66

michep commented 12 months ago

hi @jerson, I can confirm that with commit b47cd4e keyspair generation is OK, thank you

jerson commented 12 months ago

Thanks a new version was released: https://pub.dev/packages/openpgp/versions/3.7.2 feel free to reopen if you need

jerson / flutter-openpgp

OpenPGP.generate() pub key is unusable in other openpgp libraries #65