threadpanic/rustpg
1
0
Fork
You've already forked rustpg
0

bug: revoked signer not flagged after decrypt of sign-then-encrypt message #15

Open
opened 2026年05月08日 15:17:48 +02:00 by threadsafety · 0 comments

report_signature() in decrypt.rs calls verify_detached_bytes() without consulting is_revoked(). After decrypting a sign-then-encrypt or RPGV message, no warning is shown if the sender key is revoked. Fix: check is_revoked() in report_signature() for CLI, and in the GUI post-decrypt verify flow.

report_signature() in decrypt.rs calls verify_detached_bytes() without consulting is_revoked(). After decrypting a sign-then-encrypt or RPGV message, no warning is shown if the sender key is revoked. Fix: check is_revoked() in report_signature() for CLI, and in the GUI post-decrypt verify flow.
Sign in to join this conversation.
No Branch/Tag specified
main
alpha-0.4.1
alpha-0.4.0
alpha-0.3.3
alpha-0.3.2
alpha-0.3.1
v0.3.1
alpha-1
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
threadpanic/rustpg#15
Reference in a new issue
threadpanic/rustpg
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?