Re: EdDSA Verification Bug - Clarification on Format 2 Verification Failure

Zachary Fogg via Gcrypt-devel <[email protected]> Wed, 14 Jan 2026 21:50:13 -0500
Newsgroups gmane.comp.encryption.gpg.libgcrypt.devel
Message-ID <CAC7bEvn5WJ5wuXMj1xyAjcE6qK0MSfOKiAni2j9yb0JjEziFCw@mail.gmail.com>
i've never found a security bug before and am new to the field, just
tinkering with my own code only. i just happened to be coding on my project
and found the bug and thought i'd tell the developers. i didn't think to
check for a security policy, i just wanted to confirm it's a bug and get it
fixed so my project will work. i'll submit a bug through the security
policy, thanks.

On Wed, Jan 14, 2026 at 5:42 PM Sam James <[email protected]> wrote:

> Zachary Fogg via Gcrypt-devel <[email protected]> writes:
>
> > **In-Reply-To:** <response from NIIBE Yutaka on Oct 22, 2025>
> >
> > Hi NIIBE Yutaka,
> >
> > Thank you for your response on October 22! I apologize for the delay - I
> am new to the list and didn't receive your email
> > until I checked the web archives today.
>
> Out of interest..
>
> GnuPG's security policy is at
> https://gnupg.org/documentation/security.html. Is there a reason you
> don't seem to have followed that?
>
> > [...]
>

_______________________________________________
Gcrypt-devel mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gcrypt-devel