Recent commits to derivepassphrase.git (d2bb555fd898d63b413b37dc2bd1374d82daeffe)

Provide more deterministic signatures for the test keys

software@the13thletter.info (Marco Ricci) — Sat, 26 Jul 2025 16:45:41 +0200

Record and provide more deterministic signatures for the test keys, where feasible. In particular, for DSA and ECDSA keys, support recording the RFC 6979 deterministic DSA signatures, as implemented by Pageant. In particular, this entails that the `expected_signature` and `derived_passphrase` fields of the test keys need to change to accomodate the new shape of the data. For the existing DSA and ECDSA keys, RFC 6979 signatures and expected master passphrases are also provided. Providing the Pageant 0.68–0.80 deterministic signatures and expected master passphrases however is not quite so straight-forward: because the signature class is the subject of CVE-2024-31497, Pageant < 0.81 is considered to have a security hole, and thus it is hard to obtain pre-compiled, unpatched installations of Pageant to compute the signatures/master passphrases against.

Fix, and test for, the consistency of the SSH test keys

software@the13thletter.info (Marco Ricci) — Sat, 26 Jul 2025 11:45:19 +0200

A typo existed in the ECDSA NIST P-521 raw public key data, making it incompatible with the copy of the public key included in the raw private key blob. This caused UNIX Pageant (and likely any other SSH agent supporting deterministic DSA signatures, if they exist) to reject unloading and signing with that key, despite actually supporting the key format. So fix the typo, and add tests and machinery to ensure rudimentary consistency of all test key data.

Fix some test suite setup mistakes

software@the13thletter.info (Marco Ricci) — Wed, 23 Jul 2025 20:13:06 +0200

These mistakes were carried over from v0.5, and cause woe on The Annoying OS even before actually running any tests.

Merge topic branch 'release-checklist' into master

software@the13thletter.info (Marco Ricci) — Thu, 26 Jun 2025 18:29:58 +0200

* release-checklist: Fix more details in the release checklist, after the fact

Fix more details in the release checklist, after the fact

software@the13thletter.info (Marco Ricci) — Tue, 24 Jun 2025 22:28:10 +0200

Some details in the publishing of the documentation are slightly off.

Update wishlist to post-v0.5.1

software@the13thletter.info (Marco Ricci) — Tue, 24 Jun 2025 22:09:38 +0200

Release 0.5.1

software@the13thletter.info (Marco Ricci) — Tue, 24 Jun 2025 21:59:36 +0200

Merge topic branch 'release-checklist' into master

software@the13thletter.info (Marco Ricci) — Tue, 24 Jun 2025 21:50:48 +0200

* release-checklist: Fix some details in the release checklist

Fix some details in the release checklist

software@the13thletter.info (Marco Ricci) — Tue, 24 Jun 2025 21:48:33 +0200

The `bump-my-version` incantation was wrong, and actually already set up for committing and tagging.

Merge topic branch 'documentation-fixes' into master

software@the13thletter.info (Marco Ricci) — Sun, 22 Jun 2025 22:52:17 +0200

* documentation-fixes: Fix links to Windows SSH key support status elsewhere in the docs