From d24375271b97e45deaeb1ef0a8434c64066ba2e8 Mon Sep 17 00:00:00 2001 From: Werner Koch Date: Sun, 2 Apr 2017 20:02:55 +0200 Subject: agent: Use OCB for key protection with --enable-extended-key-format. * agent/protect.c (PROT_DEFAULT_TO_OCB): Remove macro. (agent_protect): Make the default protection mode depend on the extend key format option. Signed-off-by: Werner Koch --- doc/gpg-agent.texi | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'doc/gpg-agent.texi') diff --git a/doc/gpg-agent.texi b/doc/gpg-agent.texi index ca9d469fd..6aab646f0 100644 --- a/doc/gpg-agent.texi +++ b/doc/gpg-agent.texi @@ -579,7 +579,8 @@ the passphrase of a key will also convert the key to that new format. Using this option makes the private keys unreadable for gpg-agent versions before 2.1.12. The advantage of the extended private key format is that it is text based and can carry additional meta data. - +Note that this option also changes the key protection format to use +OCB mode. @anchor{option --enable-ssh-support} @item --enable-ssh-support -- cgit v1.2.3