summaryrefslogtreecommitdiffstats
path: root/doc/gpg-agent.texi
diff options
context:
space:
mode:
authorWerner Koch <wk@gnupg.org>2017-04-02 20:02:55 +0200
committerWerner Koch <wk@gnupg.org>2017-04-02 20:02:55 +0200
commitd24375271b97e45deaeb1ef0a8434c64066ba2e8 (patch)
tree610e0d18703b6727935a72afcae6e8785714680b /doc/gpg-agent.texi
parentkbx: Unify blob reading functions. (diff)
downloadgnupg2-d24375271b97e45deaeb1ef0a8434c64066ba2e8.tar.xz
gnupg2-d24375271b97e45deaeb1ef0a8434c64066ba2e8.zip
agent: Use OCB for key protection with --enable-extended-key-format.
* agent/protect.c (PROT_DEFAULT_TO_OCB): Remove macro. (agent_protect): Make the default protection mode depend on the extend key format option. Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'doc/gpg-agent.texi')
-rw-r--r--doc/gpg-agent.texi3
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/gpg-agent.texi b/doc/gpg-agent.texi
index ca9d469fd..6aab646f0 100644
--- a/doc/gpg-agent.texi
+++ b/doc/gpg-agent.texi
@@ -579,7 +579,8 @@ the passphrase of a key will also convert the key to that new format.
Using this option makes the private keys unreadable for gpg-agent
versions before 2.1.12. The advantage of the extended private key
format is that it is text based and can carry additional meta data.
-
+Note that this option also changes the key protection format to use
+OCB mode.
@anchor{option --enable-ssh-support}
@item --enable-ssh-support