Re: [pacman-dev] [PATCH] pacman-key: change signing key to ed25519

2020-11-05 Thread Geert Hendrickx via pacman-dev
On Thu, Nov 05, 2020 at 11:03:06 +1000, Allan McRae wrote: > These are strong arguments to keep the current default. Particularly > given there is nothing wrong with the current default at the moment, and > you can initialize your pacman keyring "by hand" if you really are > concerned. How

Re: [pacman-dev] [PATCH] pacman-key: change signing key to ed25519

2020-11-04 Thread Allan McRae
On 5/11/20 9:23 am, Jonas Witschel wrote: > On 2020-11-04 21:53, Geert Hendrickx via pacman-dev wrote: >> Larger RSA keys are not the way forward, switch to ed25519 instead. >> This will also become the default in the next version of GnuPG. >> [...] >> -Key-Type: RSA >> -Key-Length: 4096 >>

Re: [pacman-dev] [PATCH] pacman-key: change signing key to ed25519

2020-11-04 Thread Eli Schwartz
On 11/4/20 5:47 PM, Geert Hendrickx via pacman-dev wrote: > On Wed, Nov 04, 2020 at 16:30:19 -0500, Eli Schwartz wrote: >> Currently pacman assumes gpgme from >= the year 2010, is that sufficient >> to read ed25519? (idk, it's shelling out to gpg and thus likely doesn't >> care?) Maybe we should

Re: [pacman-dev] [PATCH] pacman-key: change signing key to ed25519

2020-11-04 Thread Jonas Witschel
On 2020-11-04 21:53, Geert Hendrickx via pacman-dev wrote: > Larger RSA keys are not the way forward, switch to ed25519 instead. > This will also become the default in the next version of GnuPG. > [...] > -Key-Type: RSA > -Key-Length: 4096 > +Key-Type: EDDSA > +Key-Curve: ed25519 I will note

Re: [pacman-dev] [PATCH] pacman-key: change signing key to ed25519

2020-11-04 Thread Geert Hendrickx via pacman-dev
On Wed, Nov 04, 2020 at 16:30:19 -0500, Eli Schwartz wrote: > Currently pacman assumes gpgme from >= the year 2010, is that sufficient > to read ed25519? (idk, it's shelling out to gpg and thus likely doesn't > care?) Maybe we should bump this anyway in the expectation that requiring > a ~2015

Re: [pacman-dev] [PATCH] pacman-key: change signing key to ed25519

2020-11-04 Thread Eli Schwartz
On 11/4/20 3:53 PM, Geert Hendrickx via pacman-dev wrote: > Larger RSA keys are not the way forward, switch to ed25519 instead. Currently pacman assumes gpgme from >= the year 2010, is that sufficient to read ed25519? (idk, it's shelling out to gpg and thus likely doesn't care?) Maybe we should

[pacman-dev] [PATCH] pacman-key: change signing key to ed25519

2020-11-04 Thread Geert Hendrickx via pacman-dev
Larger RSA keys are not the way forward, switch to ed25519 instead. This will also become the default in the next version of GnuPG. Signed-off-by: Geert Hendrickx --- scripts/pacman-key.sh.in | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/pacman-key.sh.in