gnupg-2.3.5

[Douglas R. Reno]

New point version

[Bruce Dubbs]

Noteworthy changes in version 2.3.5 (2022-04-21)

• gpg: Up to five times faster verification of detached signatures. Doubled detached signing speed.

• gpg: Threefold decryption speedup for large files.

• gpg: Nearly double the AES256.OCB encryption speed.

• gpg: Removed EAX from the preference list.

• gpg: Allow --dearmor to decode all kinds of armor files.

• gpg: Remove restrictions for the name part of a user-id.

• gpg: Allow decryption of symmetric encrypted data even for non-compliant cipher.

• gpg,gpgsm: New option --require-compliance.

• gpgsm: New option --ignore-cert-with-oid.

• gpgtar: Create and handle extended headers to support long file names.

• gpgtar: Support file names longer than MAX_PATH on Windows.

• gpgtar: Use a pipe for decryption and thus avoid memory exhaustion.

• gpgtar: New option --with-log.

• agent: New flag "qual" for the trustlist.txt.

• scdaemon: Add support for GeNUA cards.

• scdaemon: Add --challenge-response option to PK_AUTH for OpenPGP cards.

• dirmngr: Support the use of ECDSA for CRLs and OCSP.

• dirmngr: Map all gnupg.net addresses to the Ubuntu keyserver.

• ssh: Return a faked response for the new session-bind extension.

• gpgconf: Add command aliases -L -K -R.

• gpg: Request keygrip of key to add via command interface.

• gpg: Print Yubikey version correctly.

• gpg: Always use version >= 4 to generate key signature.

• gpg: Fix generating AEAD packet.

• gpg: Fix version on symmetric encrypted AEAD files if the force option is used.

• gpg: Fix adding the list of ultimate trusted keys.

• gpgsm: Fix parsing of certain PKCS#12 files.

• gpgsm: Print diagnostic about CRL problems due to Tor mode.

• agent: Use "Created:" field for creation time.

• scdaemon Fix error handling for a PC/SC reader selected with reader-port.

• scdaemon: Fix DEVINFO with no --watch.

• scdaemon: Fix socket resource leak on Windwos.

• scdaemon: Use extended mode for pkcs#15 already for rsa2048.

• scdaemon: Enhance PASSWD command to accept KEYGRIP optionally.

• scdaemon: Fix memory leak in ccid-driver.

• tpm: Always use hexgrip when storing a key password.

• dirmngr: Make WKD lookups work for resolvers not handling SRV records.

• dirmngr: Avoid initial delay on the first keyserver access in presence of --no-use-tor.

• dirmngr: Workaround for a certain broken LDAP URL.

• dirmngr: Escape more characters in WKD requests.

• dirmngr: Suppress error message on trial reading as PEM format.

• gpgconf: Fix component table when not building without TPM support.

• gpgconf: Silence warnings from parsing the option files.

• gpgconf: Do not list ignored options and mark forced options as read-only.

• gpgconf: Tweak the use of the ldapserver option.

• ssh: Fix adding an ed25519 key with a zero length comment.

• kbx: Fix searching for FPR20 in version 2 blob.

• Fix early homedir creation.

• Improve removing of stale lockfiles under Unix.

[Bruce Dubbs]

Fixed at commits

1bd1f767af Update to cbindgen-0.23.0.
6a1db365e3 Update to gnupg-2.3.5.
a682acf40b Update to epiphany-42.2. and 
           Update to gtksourceview-5.4.1.