diff options
| -rw-r--r-- | OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpSecurityConstants.java | 13 |
1 files changed, 0 insertions, 13 deletions
diff --git a/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpSecurityConstants.java b/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpSecurityConstants.java index 8762cde00..755899297 100644 --- a/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpSecurityConstants.java +++ b/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpSecurityConstants.java @@ -38,19 +38,6 @@ import java.util.HashSet; */ public class PgpSecurityConstants { - /* - * TODO: - * 1. Check binding signatures for requirements on import! throw out binding signatures with insecure - * signatures (bit length, hash algo) - * - * - put checks for curve OIDs and algorithm tags into import instead of PgpDecryptVerify? - * - check signingRing in PgpDecryptVerify? - * - ECC checks https://tools.ietf.org/html/rfc6637#section-13 - * - check encryption algo used for encrypting secret keys? - * - check S2K security? - * - check for min rsa/dsa/elgamal/ecc requirements in key creation backend - */ - /** * Whitelist of accepted symmetric encryption algorithms * all other algorithms are rejected with OpenPgpDecryptionResult.RESULT_INSECURE |