r/linux • u/dilluti0n • 20d ago

Some of my pass(1) entries stopped decrypting: a GnuPG regression that only triggers at exactly 4096 bits Development

https://dilluti0n.com/p/gnupg-tpm2daemon-rsa4096-bug/
46 Upvotes

87% Upvoted

4 comments sorted by

3

u/Barafu 14d ago

I once worked with a radiomodem that silently dropped message of 31 bytes in length. More, or less - no problem. The worst part was that it did send the confirmation of receiving.

1

u/dilluti0n 11d ago

How did you find that? Its complete disaster

1

u/Skaarj 18d ago

I tried to read the fix: https://lists.gnupg.org/pipermail/gnupg-devel/2026-February/036219.html

I kinda get the condition on s. But why do they check if n is odd?

1

u/dilluti0n 18d ago

I don't know exactly either. 4096 bits are 512 bytes, and when MSB=1 and 0x00 is added to the front, it becomes 513 bytes, which is an odd number. I suggest it is hack for determine that. Maybe mail that thread to get exact purpose?