Andrei 67410fb9e4 openpgp: Fix padding of EdDSA signature MPIs. ...

Previous behaviour only correctly padded MPIs of 31 bytes, however it is also
possible for Ed25519 keys to be less than 31 bytes which is particularly
visible for the legacy Ed25519 format, which can cause erroneous signature
verification failures in some unlucky cases.  See section 11.3.1 of RFC 9580.

* guix/openpgp.scm (get-signature)[get-sig]: Pad when BV is shorter than 32
bytes.
* tests/openpgp.scm (%short-hello-signature/ed25519/sha512): New variable.
("verify-openpgp-signature, good signatures"): Test it.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Merges: #10979

2026-09-04 22:58:15 +02:00

..

import

import/utils: Allow `find-version' to match an over-specified version.

2026-08-25 10:07:51 +09:00

keys/openpgp

tests: keys: Moving to openpgp subdirectory.

2026-04-10 14:55:04 +09:00

machine

tests: Use ‘match’ when mocking a Hetzner HTTP server.

2026-06-18 16:46:52 +02:00

services

services: configuration: Add environment variable serializer.

2026-04-12 17:23:42 +02:00

accounts.scm

system: Relax subordinate ID validation.

2025-12-11 15:43:16 +01:00

base16.scm

…

base32.scm

…

base64.scm

…

boot-parameters.scm

…

bournish.scm

…

build-emacs-utils.scm

…

build-utils.scm

Reapply "Update Maxim's email address."

2025-09-18 13:44:12 +09:00

builders.scm

tests: builders: Switch to pyproject-build-system.

2026-05-24 10:14:42 +01:00

cache.scm

cache: Avoid cache cleanup storms from concurrent processes.

2024-08-21 00:52:39 +02:00

challenge.scm

tests: challenge: produce narinfo StorePath with proper hash length.

2026-07-02 19:42:48 +02:00

channels.scm

channels: Resolve dependencies recursively.

2026-03-25 23:51:26 +01:00

combinators.scm

…

containers.scm

tests: Skip container tests that call ‘primitive-fork’ in a ‘safe-clone’ child.

2026-06-18 16:46:53 +02:00

cpio.scm

utils: Don’t re-export ‘call-with-temporary-output-file’.

2024-04-15 22:36:42 +02:00

cve-sample.json

cve: Upgrade to JSON 2.0 feeds.

2025-08-31 12:39:24 +02:00

cve.scm

cve: Upgrade to JSON 2.0 feeds.

2025-08-31 12:39:24 +02:00

debug-link.scm

Revert "Use mmap for the elf parser, reducing memory usage."

2025-10-30 16:19:50 +09:00

derivations.scm

tests: Pass ‘User-Agent’ header when downloading from www.gnu.org.

2026-03-29 22:20:59 +02:00

discovery.scm

…

file-systems.scm

tests: Adjust to Guile 3.0.10+.

2026-01-25 21:23:25 +01:00

gexp.scm

gexp: Allow gexp inputs when creating vectors using the read syntax.

2026-08-10 01:09:28 +08:00

git-authenticate.scm

guix: openpgp: Refactor openpgp-fingerprint->bytevector.

2026-04-10 14:46:59 +09:00

git.scm

tests: git: Avoid duplicated helper code.

2026-07-06 12:00:49 +02:00

glob.scm

Update Giacomo's email address.

2025-12-03 14:38:09 +09:00

gnu-maintenance.scm

gnu-maintenance: ‘generic-html’ recognizes ‘release-file-regexp’ property.

2025-11-18 13:05:49 +01:00

grafts.scm

grafts: Always depend on all the outputs of the original derivation.

2025-10-05 20:30:45 +02:00

graph.scm

…

gremlin.scm

Revert "Use mmap for the elf parser, reducing memory usage."

2025-10-30 16:19:50 +09:00

guix-archive.sh

…

guix-authenticate.sh

tests: keys: Moving to openpgp subdirectory.

2026-04-10 14:55:04 +09:00

guix-build-branch.sh

tests: Fix guix-build-branch.sh.

2026-03-17 18:45:40 +01:00

guix-build.sh

gnu: time: Update to 1.10.

2026-04-19 10:54:06 +03:00

guix-daemon.sh

tests: Fix improper narinfo ‘Deriver’ and ‘References’ field values.

2026-07-02 19:42:47 +02:00

guix-describe.sh

…

guix-download.sh

tests: Remove interference from the user’s Git config.

2024-05-13 16:31:35 +02:00

guix-environment-container.sh

shell: Add --cwd.

2026-04-30 02:07:20 +02:00

guix-environment.sh

environment: Allow setting environment variables with -E.

2026-06-15 10:48:17 +09:00

guix-gc.sh

gnu: Remove lsh.

2025-11-21 14:38:44 +01:00

guix-git-authenticate.sh

git authenticate: Gracefully handle passing an annotated tag to ‘--end’.

2025-06-22 23:45:36 +02:00

guix-graph.sh

…

guix-hash.sh

…

guix-home.sh

tests: Increase test timeout and honor ‘GUIX_TESTS_BUILD_TIMEOUT’.

2025-10-17 12:23:54 +02:00

guix-lint.sh

scripts: lint: Add --manifest option.

2026-09-02 12:16:03 +02:00

guix-locate.sh

locate: Accept ‘--clear’ without additional arguments.

2023-11-15 18:29:37 +01:00

guix-pack-localstatedir.sh

tests: Increase test timeout and honor ‘GUIX_TESTS_BUILD_TIMEOUT’.

2025-10-17 12:23:54 +02:00

guix-pack-relocatable.sh

tests: Increase test timeout and honor ‘GUIX_TESTS_BUILD_TIMEOUT’.

2025-10-17 12:23:54 +02:00

guix-pack.sh

tests: Fix (getcwd) failing without chroot.

2026-02-06 20:49:01 +01:00

guix-package-aliases.sh

…

guix-package-net.sh

…

guix-package.sh

tests: Do not refer to ‘texlive’ package.

2026-02-12 23:03:31 +01:00

guix-refresh.sh

refresh: Allow specifying a partial version via the version specification.

2025-05-19 10:07:24 +09:00

guix-repl.sh

…

guix-shell-export-manifest.sh

tests: guix-shell-export-manifest: Fix pyproject-build-system python test.

2024-12-14 01:28:49 +01:00

guix-shell.sh

shell: Add --cwd.

2026-04-30 02:07:20 +02:00

guix-style.sh

scripts: style: Sort more kinds of package definitions.

2025-02-09 18:20:41 +01:00

guix-system.sh

tests: guix-system: Use dhcpcd-service-type instead of ISC dhcp.

2026-05-16 12:50:11 +02:00

guix-time-machine.sh

tests: guix-time-machine: Actually fail if test fails.

2026-07-01 10:50:04 +02:00

home-import.scm

home: Define ‘%base-home-services’.

2025-01-16 22:32:11 +01:00

home-services.scm

…

http-client.scm

…

inferior.scm

…

ipfs.scm

…

ld-wrapper.scm

tests: New ld-wrapper test.

2025-10-29 11:51:24 +09:00

lint.scm

lint: Fix regressions in tests.

2025-11-14 16:42:16 +09:00

modules.scm

build-systems: gnu: Export %default-gnu-imported-modules and %default-gnu-modules.

2024-08-31 10:42:16 +02:00

monads.scm

gexp: ‘with-parameters’ properly handles ‘%graft?’.

2025-03-05 00:28:49 +01:00

nar.scm

guix: serialization: validate directory entry names in fold-archive [security fix].

2026-07-02 19:42:47 +02:00

networking.scm

Reapply "Update Maxim's email address."

2025-09-18 13:44:12 +09:00

node.scm

build/node: Preserve field order of modified JSON files.

2026-07-08 18:33:27 +02:00

offload.scm

Reapply "Update Maxim's email address."

2025-09-18 13:44:12 +09:00

openpgp.scm

openpgp: Fix padding of EdDSA signature MPIs.

2026-09-04 22:58:15 +02:00

pack.scm

tests: Fix “appimage + localstatedir” test.

2026-06-18 16:46:52 +02:00

packages.scm

tests: packages: Switch to pyproject-build-system.

2026-05-24 10:14:43 +01:00

pki.scm

…

processes.scm

tests: Run in a chroot and unprivileged user namespaces.

2025-03-26 17:57:44 +01:00

profiles.scm

scripts: system: Remove unused syntax.

2026-07-23 23:45:30 +02:00

publish.scm

guix: serialization: validate directory entry names in fold-archive [security fix].

2026-07-02 19:42:47 +02:00

read-print.scm

read-print: Adjust test for keyword alignment.

2025-02-24 23:33:51 +01:00

records.scm

records: Warn about shadowing due to inherited field value bindings.

2026-03-29 22:32:57 +02:00

rpm.scm

Reapply "Update Maxim's email address."

2025-09-18 13:44:12 +09:00

scripts.scm

…

search-paths.scm

…

services.scm

services: ‘shepherd-service-upgrade’ handles canonical name changes.

2025-03-05 00:28:49 +01:00

sets.scm

…

size.scm

…

status.scm

…

store-database.scm

utils: Don’t re-export ‘call-with-temporary-output-file’.

2024-04-15 22:36:42 +02:00

store-deadlock.scm

daemon: Explicitly unlock output path in the has-become-valid case.

2024-12-30 00:51:57 +01:00

store-deduplication.scm

tests: Fix ‘store-deduplication.scm’ on systems with large blocks.

2025-10-06 10:42:08 +02:00

store-roots.scm

…

store.scm

daemon: Bypass authentication when importing content-addressed store items.

2026-08-17 16:47:36 +02:00

style.scm

tests: style: conditionally disable two tests.

2026-06-30 10:57:49 +02:00

substitute.scm

scripts: substitute: Accommodate renaming unwritable directories.

2026-07-05 11:47:15 +02:00

swh.scm

swh: ‘lookup-origin-revision’ handles branches pointing to directories.

2024-03-09 18:55:49 +01:00

syscalls.scm

Revert "syscalls: Add mmap support."

2025-10-30 16:19:51 +09:00

system.scm

…

test.drv

…

toml.scm

build: toml: Adapt for toml 1.1.0

2026-08-08 23:01:52 +01:00

transformations.scm

transformations: Fix recursive?' inheritance for with-git-url'.

2026-01-29 13:51:06 +09:00

ui.scm

ui: ‘load*’ accepts a file name or a port.

2026-05-10 17:01:08 +02:00

union.scm

gnu: %bootstrap-inputs-for-tests: Drop input labels.

2026-06-05 16:24:49 +02:00

upstream.scm

upstream: Define ‘preferred-upstream-source’.

2025-01-08 23:03:04 +01:00

utils.scm

utils: Don’t re-export ‘call-with-temporary-output-file’.

2024-04-15 22:36:42 +02:00

uuid.scm

…

workers.scm

…