[Autocrypt] How to create the "raw key" part from an RSA key

Bjoern b44treader at googlemail.com
Wed May 24 17:36:49 EDT 2017


Okay, I've fixed the issues:

- Primary key can 'sign+cert', subkey can 'encrypt'
- No hash/algo/encryption preferences for subkeys
- Reorder hash preferences
- Disable bzip2 preference (don't know if this will be supported by
Delta Chat for now).

Regarding the "bad" signature for the "subkey bindung": I could not
reproduce this, eg. gpg imports the key without obvious errors. Which
program do you use to check the subkey binding signature? (NB: I've
implemented the subkey bindung myself, didn't found it in Pep/Netpgp,
here's the source
https://github.com/r10s/deltachat-core/blob/master/src/mre2ee_driver_openssl.c#L152
which is based upon Pep/Netpgp's selfsig here:
https://github.com/r10s/deltachat-core/blob/master/libs/netpgp/src/keyring.c#L846
)

Can you please re-check the keys using the following examples? Thanks
in advance!

-----BEGIN PGP PUBLIC KEY BLOCK-----

xsBNBFkl95QBCAC7x2EP1R0q3JhDdye0CCnfkCeyqkjFNyAMCvZg3X45CJzZHv2IGusQStyPfWv8Q7
8sBZ6PsXAnoslGTrx9H23ydNW7zeA8027XbkL3bEcemDMl54uWVmZ7ndDeS+o29gvQLoZ1aWn5MvRY
UM53wdAIikgDwnCfXpqudhD0wDC5M1CYn3XL1Osj4o/RM86owB3E9J5L30ZAWpq9U88+Kgq0OG2Wtr
i22Yx9XHzd5YkLQw7hapHVoKyve0yi73k0ZiamATrMZ84LtMvWCufytD4WUGtSIXYMQ4xMeDLUNkH6
QBwtWPrUkP2T6s/L/6XnygF5R6kHnrBL4RSmah55QiuhABEBAAHNDDxmb29AYmFyLmRlPsLAfAQTAQ
IAMAUCWSX3lAUJAAAAAAkQxdrTIKYu7HUCGQECGwMGCwkHAwIBBhUICQoLAgIWAgIeAQAAaCEH/1qi
UjY20DLvgRIyhnwGGGsPQowX3M+34EoG4vGaNGDiREGzWoK5d2Mtw5rptVGaCkzIvLT00MP9C0HokB
vrZISIZsOL1WvvTqBiJ8X7bsMo8j0dRCHvwdnVitGfqVYzBO2R5cNm8sGpP6seERl7rSR/fWKEl/r/
37RlbIN87bqJeHN6SnvXOmixsbAlaFPcCWIFBQkXxc5sujf3RAgNAYKJ3s2HMrofTg4KpWdPhEgqlj
5MbRomxHpGYq1QrS2UIGKDAxucoM1vjrOWvUVy+IW9BBzn8szauympx5e0S8k4kjMIuVN8KDcfN0Ln
uJoEBa4+YW3h48XO05kM8VjilnXOwE0EWSX3lAEIAMHlKFUv0emhxTreWqXxqRk+7//VJOFl/WwA/Y
0upQOf2WLoZnlgrEVohrhzqG4q9ewe410Hd26KjCh1UDbzI+PlVEE+qg0w44AR/OeaScNjgamjf6jo
dJUtxpgw//MASpQ0W7vxU+B9PGcCF4yR9COGe5UHfLySzRYRD4N9pB7+U5c0THijXKDL4jkDx0OTqv
8BQdMm7ZBWmYj0uPUdaWIXYNmsGtk+9ctMkPzeeFMI1YiJ21i9y+sD0OB6mwa6VAGpWW33uOhGcD6D
gS7Nc3d8LX0/up9TzUqtIRyco9kEYH7N3kwnc4P5m3QODdyMQyjO2s6uuFN8X5dOyCFhL3cAEQEAAc
LAaAQYAQIAHAUCWSX3lAUJAAAAAAkQxdrTIKYu7HUCGwwCHgEAAExGB/sEqO92PSlq9UaK1hlEec64
P9Mi7tFnXbqYVfAlHsrveJaCjA+7Tu01oshr5+iJFrYrXe/I7REgfWFLFlUnG1Vm+5eHwRyA6qUEF8
1J5+oq57Bq/nqJkxWlvpumGxStjVMbZKF2vFIkIXM7M22PBG4cmi0Pj4OfLBC8QiX+4xL3M9WetP6b
Te+csY3/Xoyy8y6xpVF/xTyncLJe4JjhLtkjSEObP61FkSFJXFPfVOWWfmTNL2lUBarrxyi9aJ1Azn
uRBlmAUStbkNb2NHvk/XpqcULmy89EBw2tYjfz/TgtBpSZEiSTiseX1ZWCQ873K9gmM8CZXq/bXxHe
ImciKdXE
-----END PGP PUBLIC KEY BLOCK-----


-----BEGIN PGP PRIVATE KEY BLOCK-----

xcLYBFkl95QBCAC7x2EP1R0q3JhDdye0CCnfkCeyqkjFNyAMCvZg3X45CJzZHv2IGusQStyPfWv8Q7
8sBZ6PsXAnoslGTrx9H23ydNW7zeA8027XbkL3bEcemDMl54uWVmZ7ndDeS+o29gvQLoZ1aWn5MvRY
UM53wdAIikgDwnCfXpqudhD0wDC5M1CYn3XL1Osj4o/RM86owB3E9J5L30ZAWpq9U88+Kgq0OG2Wtr
i22Yx9XHzd5YkLQw7hapHVoKyve0yi73k0ZiamATrMZ84LtMvWCufytD4WUGtSIXYMQ4xMeDLUNkH6
QBwtWPrUkP2T6s/L/6XnygF5R6kHnrBL4RSmah55QiuhABEBAAEAB/48erb0VnuSdoJEGHidL5PtAY
0HqnjNrDeSKWW5RR2GWRPLioO19pWHJdVsEcVZ9qf4EcdEGK461d9l2a4zzo+m66J7Xo++h4rHsCe5
cRJm9DZlGvKGdUWEwwumzWSeVxju8E02O8F6FcNFPqGBSNcsKP2Q2GtVqS7Ayh4j9lK7ExIr6cOD/r
ds5+qBgd/nMEq3/VrYvY/6ktRerFHOujO8F22s/X/hQnTzWdot3DgfVDeaZ392yk7Z6nblPyCky+8q
w6kMbudEJPYkIytydB0pdqRLJyabp6GaI08E1zGoM6t7aikLl6pFCOCHukO2knu4V9SyWl2yusQlW9
4taCnBBADwLzbyxjuqmNOQRPjqfeeC7mXtCpCvnGf0ppt1taQYlgJu0YQSiCFW+22awVHM230jEzwX
2tZRc3OzBhBc5wXaq/rqepTPKFr9wsNWo/lXWWK6s4hmTJi0knMyVTnyQ7fAjbJpFcd++tLsnx0EmD
gAhevKV4V8CREV+CyaaHZwVQQAyCTDk5d/NT6P//eVWY30YRrcqnyJIlrBz0HvslKTylvIh55l3iHi
Sn3S+FVz++OOVr5UMkyPloORzVScrJQ+67H/ecvuNvrgZjJonA6/Xn77AnAtojjfajZxXVjT958unS
Bh95meMukA7Au3p6figasUsIauIvovC1dB4ztDqh0D/iTVoIzvEYD7lVWBDeb4bbpt7o1n1mSASTm5
GCuJA/z7doPySYPdi0xJ8ulJUlBVtY4SNuv2ZI2XThnFPDUkzSlC0UBjW+NWMfzWsEYQU3HGWoa3ZB
fk+gnu8Ar8JKTSf/XTQfxt8ohw/dPJ1pCc3gE8MqUtO90SWQ1GcJOu13LvTgvNDDxmb29AYmFyLmRl
PsLAfAQTAQIAMAUCWSX3lAUJAAAAAAkQxdrTIKYu7HUCGQECGwMGCwkHAwIBBhUICQoLAgIWAgIeAQ
AAaCEH/1qiUjY20DLvgRIyhnwGGGsPQowX3M+34EoG4vGaNGDiREGzWoK5d2Mtw5rptVGaCkzIvLT0
0MP9C0HokBvrZISIZsOL1WvvTqBiJ8X7bsMo8j0dRCHvwdnVitGfqVYzBO2R5cNm8sGpP6seERl7rS
R/fWKEl/r/37RlbIN87bqJeHN6SnvXOmixsbAlaFPcCWIFBQkXxc5sujf3RAgNAYKJ3s2HMrofTg4K
pWdPhEgqlj5MbRomxHpGYq1QrS2UIGKDAxucoM1vjrOWvUVy+IW9BBzn8szauympx5e0S8k4kjMIuV
N8KDcfN0LnuJoEBa4+YW3h48XO05kM8VjilnXHwtgEWSX3lAEIAMHlKFUv0emhxTreWqXxqRk+7//V
JOFl/WwA/Y0upQOf2WLoZnlgrEVohrhzqG4q9ewe410Hd26KjCh1UDbzI+PlVEE+qg0w44AR/OeaSc
Njgamjf6jodJUtxpgw//MASpQ0W7vxU+B9PGcCF4yR9COGe5UHfLySzRYRD4N9pB7+U5c0THijXKDL
4jkDx0OTqv8BQdMm7ZBWmYj0uPUdaWIXYNmsGtk+9ctMkPzeeFMI1YiJ21i9y+sD0OB6mwa6VAGpWW
33uOhGcD6DgS7Nc3d8LX0/up9TzUqtIRyco9kEYH7N3kwnc4P5m3QODdyMQyjO2s6uuFN8X5dOyCFh
L3cAEQEAAQAH/1y3IWQqq6uWKWOO87WqKvvhdo3U8/+770R37MZX6ZwkEaUUD/w2V+oQo2sMExwq+t
Ffq8TOTzPSmFa4UhUUirLs9C8GsfYAzKhu8Yol4uPFbzkY73BrR2QWMYKQ27LtDrxzlPH34e3UtM9k
1rHnEODz66BFpkXdxKeqnMp5h8Mxb2hO07NA31AeoTkyoGMGliunN2ZOLXCUZClWWrtHnJcfolW18L
xTCYJgYtoziGrk6I5O7b2wET1itTqo3gxBFhyRYHmUXixM2kMl6XOFp83obhykFI3GOgTx5zFPRWEC
nwD6ddVXWufVl4An1zFcElkUHBpGupURIhrbDk//GeEEAPqPumnxvNXXeFB+6Hy1ZRs+e1gw5gkFfm
wzRQmHEKpS8NzWdvU2Hm7hsDDDGUWDkCBEu+6C1Uo6MGX+vtKCA7bEmmzB5fBxt9Imwf+km207Cc1G
imz6Kt+jXSKRK3CJJSgKTFyO7m/I4/n1XLi2LF8qoxz19PBBUI1tA122sGBfBADGGo6VxTmqehJBXJ
8w9OQRHUM2XGVLvkcfUaWFwTDnQs8xiy+8SaVOpjesv35eRBj8/rtIeGhPpuSNEOaItZqK5M39Ig45
MJbldQcuwoUPPe5+0oWm5pp+0snbt/FuhMIOneT3QowfuXJWicqlPsofY24UnVBgzNn1QmI2x7Un6Q
P+JcaJO80ct5iqthxsxF/LWk6srO33u77hIz3QZtVTatwNXwiP/MeuRhLTjkT5pkkVDQApB3NfhkxY
76lqGk0h1DQ4IZ8hKgtnvwIVn3a4FwEYM8xRFcOHQzYxkgjp7nR9WBbF2s0I/YXzGutEZnOvfYsfc6
mKp8X7wiCj+FwSjp1BOg==
-----END PGP PRIVATE KEY BLOCK-----


On Sat, May 20, 2017 at 6:10 PM, Vincent Breitmoser
<look at my.amazin.horse> wrote:
>> fwiw, "armor" in OpenPGP land usually refers to the base64-encoding in
>> addition to the "-----BEGIN…" and "-----END…" lines and the headers.
>
> For completenes' sake: it also includes the crc checksum. Although that
> is largely ignored by implementations, since there is not really
> anything useful that can be done if it doesn't check out. I think it was
> introduced when methods of data transfer were less reliable, so it's
> largely a historical artifact at this point.
>
> (for reference: https://tools.ietf.org/html/rfc4880#section-6.2)
>
>  - V



More information about the Autocrypt mailing list