You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This is now done. I needed to add an extra method to allow a PGPDigestCalculator to do it first. In line with the current RFC only SHA-1 is accepted for it. Should show up on github soon.
Hey!
When setting a passphrase on a key which previously was unencrypted, BC chooses S2K usage
USAGE_CHECKSUM
which is not an ideal choice.OpenPGP.js for instance rejects this S2K usage as insecure.
Could you instead change the implementation of
PGPSecretKey.copyWithNewPassword()
to default toUSAGE_SHA1
as default if the previous usage was NONE?The text was updated successfully, but these errors were encountered: