From 87199383061208b30a312e12aca2b9b4efc7ec33 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dominik=20Sch=C3=BCrmann?= Date: Mon, 10 Aug 2015 10:26:58 +0200 Subject: Move TODOs into issue --- .../keychain/pgp/PgpSecurityConstants.java | 13 ------------- 1 file changed, 13 deletions(-) diff --git a/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpSecurityConstants.java b/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpSecurityConstants.java index 8762cde00..755899297 100644 --- a/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpSecurityConstants.java +++ b/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpSecurityConstants.java @@ -38,19 +38,6 @@ import java.util.HashSet; */ public class PgpSecurityConstants { - /* - * TODO: - * 1. Check binding signatures for requirements on import! throw out binding signatures with insecure - * signatures (bit length, hash algo) - * - * - put checks for curve OIDs and algorithm tags into import instead of PgpDecryptVerify? - * - check signingRing in PgpDecryptVerify? - * - ECC checks https://tools.ietf.org/html/rfc6637#section-13 - * - check encryption algo used for encrypting secret keys? - * - check S2K security? - * - check for min rsa/dsa/elgamal/ecc requirements in key creation backend - */ - /** * Whitelist of accepted symmetric encryption algorithms * all other algorithms are rejected with OpenPgpDecryptionResult.RESULT_INSECURE -- cgit v1.2.3