Re: Using gpg2 with SHA512

On Thu, 2008-02-28 at 10:18 +0530, Johnny Jacob wrote:
> On Wed, 2008-02-27 at 10:19 -0500, Jeffrey Stedfast wrote:
> > On Wed, 2008-02-27 at 15:05 +0100, Steffen Michalke wrote:
> > > Hi,
> > > 
> > > I'm using gpg v.2.0.8/libgcrypt 1.4.0 and wanted to test keys with
> > > maximum strength. Therefor I created a pair of keys with gpg2
> > > --enable-dsa2.
> > > 
> > > These keys are usable in Thunderbird, but can't be handled by Evolution
> > > (v2.21.92 btw.). The reason is that SHA-1 is hard wired as the hash
> > > method.
> > > 
> > > From Thunderbird I learned that I had to use SHA-512 instead. I enclosed
> > > three patches against evolution-data-server and evolution (v2.21.92
> > > both) which hard code SHA-512 as hash algorhythm for gpg.
> > > 
> > > I confess that I'm not a C programmer so I don't know whether I broke
> > > something but the patches work for signing and encryption.
> > 
> > There's a bug about this in Bugzilla somewhere,
> 
> Bugzilla entry for this issue :
> http://bugzilla.gnome.org/show_bug.cgi?id=304415

Can you put your patches to bugzilla? So that it is tracked well :-)

> 
> >  I think... basically,
> > the Right Fix(tm) is to provide a way for the user to choose what hash
> > algo Evolution should use.

I agree to fejj's point. Can you look into this as well. You can contact
us on mail/chat for any help you need.

-Srini