File gnupg-1.4.7-files_are_digests.patch of Package gpg1
--- gnupg-1.4.7/g10/gpg.c.orig 2007-03-05 10:02:57.000000000 +0100
+++ gnupg-1.4.7/g10/gpg.c 2007-11-29 14:49:31.000000000 +0100
@@ -344,6 +344,7 @@
oTTYtype,
oLCctype,
oLCmessages,
+ oFilesAreDigests,
oGroup,
oUnGroup,
oNoGroups,
@@ -689,6 +690,7 @@
{ oTTYtype, "ttytype", 2, "@" },
{ oLCctype, "lc-ctype", 2, "@" },
{ oLCmessages, "lc-messages", 2, "@" },
+ { oFilesAreDigests, "files-are-digests", 0, "@" },
{ oGroup, "group", 2, "@" },
{ oUnGroup, "ungroup", 2, "@" },
{ oNoGroups, "no-groups", 0, "@" },
@@ -2725,6 +2727,7 @@
case oTTYtype: opt.ttytype = pargs.r.ret_str; break;
case oLCctype: opt.lc_ctype = pargs.r.ret_str; break;
case oLCmessages: opt.lc_messages = pargs.r.ret_str; break;
+ case oFilesAreDigests: opt.files_are_digests = 1; break;
case oGroup: add_group(pargs.r.ret_str); break;
case oUnGroup: rm_group(pargs.r.ret_str); break;
case oNoGroups:
--- gnupg-1.4.7/g10/options.h.orig 2007-03-05 10:02:57.000000000 +0100
+++ gnupg-1.4.7/g10/options.h 2007-11-29 14:49:31.000000000 +0100
@@ -195,6 +195,7 @@
int no_auto_check_trustdb;
int preserve_permissions;
int no_homedir_creation;
+ int files_are_digests;
struct groupitem *grouplist;
int strict;
int mangle_dos_filenames;
--- gnupg-1.4.7/g10/sign.c.orig 2007-02-04 17:27:40.000000000 +0100
+++ gnupg-1.4.7/g10/sign.c 2007-11-29 14:57:22.000000000 +0100
@@ -692,8 +692,12 @@
build_sig_subpkt_from_sig (sig);
mk_notation_policy_etc (sig, NULL, sk);
- hash_sigversion_to_magic (md, sig);
- md_final (md);
+ if (!opt.files_are_digests) {
+ hash_sigversion_to_magic (md, sig);
+ md_final (md);
+ } else if (sig->version >= 4) {
+ log_bug("files-are-digests doesn't work with v4 sigs\n");
+ }
rc = do_sign( sk, sig, md, hash_for (sk) );
md_close (md);
@@ -751,6 +755,8 @@
SK_LIST sk_rover = NULL;
int multifile = 0;
u32 create_time=make_timestamp(),duration=0;
+ int sigclass = 0x00;
+ u32 timestamp=0;
memset( &afx, 0, sizeof afx);
memset( &zfx, 0, sizeof zfx);
@@ -766,7 +772,16 @@
fname = NULL;
if( fname && filenames->next && (!detached || encryptflag) )
- log_bug("multiple files can only be detached signed");
+ log_bug("multiple files can only be detached signed\n");
+
+ if (opt.files_are_digests && (multifile || !fname))
+ log_bug("files-are-digests only works with one file\n");
+ if (opt.files_are_digests && !detached)
+ log_bug("files-are-digests can only write detached signatures\n");
+ if (opt.files_are_digests && !opt.def_digest_algo)
+ log_bug("files-are-digests needs --digest-algo\n");
+ if (opt.files_are_digests && opt.textmode)
+ log_bug("files-are-digests doesn't work with --textmode\n");
if(encryptflag==2
&& (rc=setup_symkey(&efx.symkey_s2k,&efx.symkey_dek)))
@@ -794,7 +809,7 @@
goto leave;
/* prepare iobufs */
- if( multifile ) /* have list of filenames */
+ if( multifile || opt.files_are_digests) /* have list of filenames */
inp = NULL; /* we do it later */
else {
inp = iobuf_open(fname);
@@ -924,7 +939,7 @@
md_enable(mfx.md, hash_for(sk));
}
- if( !multifile )
+ if( !multifile && !opt.files_are_digests )
iobuf_push_filter( inp, md_filter, &mfx );
if( detached && !encryptflag && !RFC1991 )
@@ -979,6 +994,8 @@
write_status (STATUS_BEGIN_SIGNING);
+ sigclass = opt.textmode && !outfile? 0x01 : 0x00;
+
/* Setup the inner packet. */
if( detached ) {
if( multifile ) {
@@ -1019,6 +1036,47 @@
if( opt.verbose )
putc( '\n', stderr );
}
+ else if (opt.files_are_digests) {
+ byte *mdb, ts[5];
+ size_t mdlen;
+ const char *fp;
+ int c, d;
+
+ md_final(mfx.md);
+ /* this assumes md_read returns the same buffer */
+ mdb = md_read(mfx.md, opt.def_digest_algo);
+ (void)md_asn_oid(opt.def_digest_algo, (size_t)0, &mdlen);
+ if (strlen(fname) != mdlen * 2 + 11)
+ log_bug("digests must be %d + @ + 5 bytes\n", mdlen);
+ d = -1;
+ for (fp = fname ; *fp; ) {
+ c = *fp++;
+ if (c >= '0' && c <= '9')
+ c -= '0';
+ else if (c >= 'a' && c <= 'f')
+ c -= 'a' - 10;
+ else if (c >= 'A' && c <= 'F')
+ c -= 'A' - 10;
+ else
+ log_bug("filename is not hex\n");
+ if (d >= 0) {
+ *mdb++ = d << 4 | c;
+ c = -1;
+ if (--mdlen == 0) {
+ mdb = ts;
+ if (*fp++ != '@')
+ log_bug("missing time separator\n");
+ }
+ }
+ d = c;
+ }
+ sigclass = ts[0];
+ if (sigclass != 0x00 && sigclass != 0x01)
+ log_bug("bad cipher class\n");
+ timestamp = buffer_to_u32(ts + 1);
+ if (timestamp)
+ create_time = timestamp;
+ }
else {
/* read, so that the filter can calculate the digest */
while( iobuf_get(inp) != -1 )
@@ -1037,8 +1093,8 @@
/* write the signatures */
rc = write_signature_packets (sk_list, out, mfx.md,
- opt.textmode && !outfile? 0x01 : 0x00,
- create_time, duration, detached ? 'D':'S');
+ sigclass,
+ create_time, duration, detached ? 'D':'S');
if( rc )
goto leave;