After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 672145 - Protocol support for ECDSA in ssh-agent
Protocol support for ECDSA in ssh-agent
Status: RESOLVED FIXED
Product: gnome-keyring
Classification: Core
Component: ssh-agent
unspecified
Other Linux
: Normal normal
: ---
Assigned To: GNOME keyring maintainer(s)
GNOME keyring maintainer(s)
Depends on: 775981
Blocks: 641082
 
 
Reported: 2012-03-15 14:40 UTC by Stef Walter
Modified: 2018-03-05 11:37 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description Stef Walter 2012-03-15 14:40:45 UTC
Implement ECDSA code for handling signature requests in daemon/ssh-agent. This does not include actually doing the signing but parsing the requests and keys that come in on ssh-agent binary protocol, and validating them and passing them through to the PKCS#11 key store.

Reference for how to implement this would be the openssh sources.

Functions that are probably affected:
 * build_like_attributes()
 * op_add_identity()
 * op_sign_request()
 * gkd_ssh_agent_initialize_with_module()
 * gkd_ssh_agent_proto_keytype_to_algo()
 * gkd_ssh_agent_proto_algo_to_keytype()
 * gkd_ssh_agent_proto_read_public()
 * gkd_ssh_agent_proto_write_public()

Possible new functions, similar to functions for other algorithms nearby:
 * gkd_ssh_agent_proto_read_pair_ecdsa()
 * gkd_ssh_agent_proto_read_public_ecdsa()
 * gkd_ssh_agent_proto_write_public_ecdsa()
 * gkd_ssh_agent_proto_write_signature_ecdsa()
Comment 1 Infinity Zero 2014-02-26 13:31:22 UTC
Hey, what's the progress on this? This is starting to trip people up: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738660
Comment 2 Marios Titas 2014-12-30 17:05:36 UTC
In particular, it would be useful to support ed25519, not just the nist curves.
Comment 3 Stef Walter 2016-12-12 12:58:38 UTC
 gnome-keyring should just wrap stock ssh-agent to solve this problem:

https://bugzilla.gnome.org/show_bug.cgi?id=775981