Package: gnupg2 Version: 2.1.10-3 Severity: normal I have a rather large public keyring (97 MB). This hasn't in the past been an issue, especially with GnuPG 2.1.
The keybase client invokes gpg with the gpg2 --no-options -k --with-fingerprint --with-colons flags. After setting trust-model pgp, running gpg2 --check-trustdb, and running that command, I get gpg2 --no-options -k --with-fingerprint --with-colons > /dev/null 3.04s user 0.10s system 95% cpu 3.296 total This is reasonable for a 97 MB pubring.kbx. Switching to trust-model tofu+pgp, running gpg2 --check-trustdb, and running that command gives me (besides a whole bunch of "gpg: TOFU: Ignoring revoked user id") gpg2 --no-options -k --with-fingerprint --with-colons > /dev/null 34.63s user 157.30s system 99% cpu 3:12.30 total This is approximately 58 times slower. This makes the keybase client very slow and generally slows down other processes that might want to enumerate keys. Is there a way this could be sped up so the performance impact is not so great? -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.3.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=es_US.UTF-8, LC_CTYPE=es_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages gnupg2 depends on: ii dpkg 1.18.4 ii gnupg-agent 2.1.10-3 ii install-info 6.0.0.dfsg.1-4 ii libassuan0 2.4.2-2 ii libbz2-1.0 1.0.6-8 ii libc6 2.21-6 ii libgcrypt20 1.6.4-4 ii libgpg-error0 1.21-1 ii libksba8 1.3.3-1 ii libreadline6 6.3-8+b4 ii libsqlite3-0 3.10.1-1 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages gnupg2 recommends: ii dirmngr 2.1.10-3 Versions of packages gnupg2 suggests: pn gnupg-doc <none> pn parcimonie <none> ii xloadimage 4.1-23+b1 -- no debconf information -- brian m. carlson / brian with sandals: Houston, Texas, US +1 832 623 2791 | https://www.crustytoothpaste.net/~bmc | My opinion only OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
signature.asc
Description: PGP signature
