Paul Schaub

OpenPGP: Signature digest prefix is not checked

1

It was [pointed out](https://mailarchive.ietf.org/arch/msg/openpgp/Zv8v1IwbbXYiDPKytfbUmtNdxak/) on the IETF openpgp mailing list, that some implementations do not properly check the signature digest prefix. It turns out, Bouncy Castle - and by extend...

OpenPGP: Old vs. New Packet Format

3

Hey everyone! I noticed, that BC supports both the old[1] and new[2] packet length format for OpenPGP packets. When being serialized, BC's packets basically decide which format to use via...

The javadoc of [PGPUtil.getDecoderStream(InputStream)](https://github.com/bcgit/bc-java/blob/master/pg/src/main/java/org/bouncycastle/openpgp/PGPUtil.java#L400) states that if the given InputStream contains binary PGP data, it will be returned directly. Otherwise an ArmoredInputStream will be returned to remove any ASCII armor....

Update NetCipher to geht rid oft faulty "Tor appears not to be running"-message

5

Hi! I installed DuckDuckGo from FDroid on my Nexus 5 running CopperheadOS (based on Marshmallow AOSP). CopperheadOS has the flag hidepid=2 set, which will also be set as default in...

How to properly use this with swiperefreshlayout?

3

Hi! I want to use the nestedWebView together with a SwipeRefreshLayout inside a CoordinatorLayout with two Toolbars (top and bottom), but the SwipeRefreshLayout is too sensible now. Is there a...

XEP-0405: Replace jid attribute by id as described in XEP-0369

1

Back in 2018, MIX-CORE [was changed](https://github.com/xsf/xeps/commit/5c552188b258653bb419806aa5a367eb1c502d32#diff-46551996fe454185b68cb3f084c2e18fL947-L991) to include Stable Participant `id=` attributes instead of Proxy `jid=` attributes in the response to a join element. This change was apparently not transferred...

PDFs: unpleasant overfull hboxes on wide tables (e.g. in XEP-0391)

1

Hi! I noticed that in the PDF of XEP-0391 $5, the content of the last column is overlaying, which makes it hard to read. This might occur in other XEPs...

Psi+ sends presence with <show>online</show>

2

Apparently Psi+ is sending presences with the value of show being 'online'. This is not allowed (see [rfc6121](https://tools.ietf.org/html/rfc6121#section-4.7.2.1)). I'm not sure, if this issue has been fixed in more recent...

Implement PGPainless.modifyKeyRing(keys, referenceTime) to allow setting custom modification date

1

This can improve the tests, since we no longer need to `Thread.sleep()` in order to test expiration dates etc.

Add support for Ed448 / X448 keys

3

See https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-05.html#name-ecc-curves-for-openpgp