* sign.c (hash_for): Add code to detect if the sk lives on a smart
authorDavid Shaw <dshaw@jabberwocky.com>
Sun, 1 Jan 2006 17:48:54 +0000 (17:48 +0000)
committerDavid Shaw <dshaw@jabberwocky.com>
Sun, 1 Jan 2006 17:48:54 +0000 (17:48 +0000)
commitcbc5c947d59b23f6e0ce9862c19bb5ff3d0cb606
tree5303409d32e410d7e73a9ea069ecd382ae943312
parent74117cf4d3935e6c191a8b11d1b672b5b0e100b6
* sign.c (hash_for): Add code to detect if the sk lives on a smart
card.  If it does, only allow 160-bit hashes, a la DSA.  This involves
passing the *sk in, so change all callers.  This is correct for today,
given the current 160-bit q in DSA, and the current SHA-1/RIPEMD160
support in the openpgp card.  It will almost certainly need changing
down the road.

* app-openpgp.c (do_sign): Give user error if hash algorithm is not
supported by the card.
g10/ChangeLog
g10/app-openpgp.c
g10/sign.c