[gnutls-dev] OpenCDK 0.5.11

Simon Josefsson jas at extundo.com
Thu Oct 26 14:08:59 CEST 2006


The OpenCDK library implement basic parts of the OpenPGP message
format.  Due to some possible security problems, the library also
implements parts of draft-ietf-openpgp-rfc2440bis-08.txt.

The aim of the library is *not* to replace any available OpenPGP
version.  There will be no support for key management (sign, revoke,
alter preferences, ...) and some other parts are only rudimentary
available.  The main purpose is to handle and understand OpenPGP
packets and to use basic operations.  For example, encrypt/decrypt,
sign/verify and packet parsing routines.  The library is used by
GnuTLS for OpenPGP support.

Noteworthy changes in version 0.5.11 (2006-10-26)
------------------------------------------------

* Add a new self test "basic" to test cdk_check_version.

* Add prototype of cdk_stream_decrypt to opencdk.h, reported by Adam
  Langley.

* Fix crash in cdk_data_transform triggered by self-tests.

Commercial support contracts for OpenCDK are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult, a
Stockholm based privately held company, is currently funding OpenCDK
maintenance.  We are always looking for interesting development
projects.  See http://josefsson.org/ for more details.

If you need help to use OpenCDK, or want to help others, you are
invited to join our help-gnutls mailing list, see:
<http://lists.gnu.org/mailman/listinfo/help-gnutls>.

Here are the compressed sources (512KB):
  http://josefsson.org/gnutls/releases/opencdk/opencdk-0.5.11.tar.gz
  ftp://ftp.gnutls.org/pub/gnutls/opencdk/opencdk-0.5.11.tar.gz

Here are GPG detached signatures using key 0xB565716F:
  http://josefsson.org/gnutls/releases/opencdk/opencdk-0.5.11.tar.gz.sig
  ftp://ftp.gnutls.org/pub/gnutls/opencdk/opencdk-0.5.11.tar.gz.sig

The software is cryptographically signed by the author using an
OpenPGP key identified by the following information:

pub   1280R/B565716F 2002-05-05 [expires: 2007-02-15]
uid                  Simon Josefsson <jas at extundo.com>
uid                  Simon Josefsson <simon at josefsson.org>
sub   1280R/4D5D40AE 2002-05-05 [expires: 2007-02-15]
sub   1024R/09CC4670 2006-03-18 [expires: 2007-04-22]
sub   1024R/AABB1F7B 2006-03-18 [expires: 2007-04-22]
sub   1024R/A14C401A 2006-03-18 [expires: 2007-04-22]

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the SHA-1 and SHA-224 checksums:

c89bae403acfac96e8e987355cf9b633b0186fd3  opencdk-0.5.11.tar.gz
99830333678a2fd196cc7721d89f5bd6834002b5  opencdk-0.5.11.tar.gz.sig

7d57dcfba8f30e63a39ef148ee34c81a6f107b95861d4c0ca2539de3  opencdk-0.5.11.tar.gz
5687fab260c970b07c073350fa31b023636e4ee246fc0e53eda66c19  opencdk-0.5.11.tar.gz.sig

Enjoy,
Timo, Nikos, Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 419 bytes
Desc: not available
URL: </pipermail/attachments/20061026/ed9927c7/attachment.pgp>


More information about the Gnutls-devel mailing list