I am trying to find the default KDF for my version of gpg:
- gpg (GnuPG) 2.2.6
- libgcrypt 1.8.2
Does anyone know how?
-
GnuPG uses S2K.– forestCommented Jun 3, 2018 at 3:20
-
Hi Forest! Could you tell me how you know that? Thanks.– PatriotCommented Jun 3, 2018 at 5:11
-
tools.ietf.org/html/rfc4880#section-3.7– forestCommented Jun 3, 2018 at 7:49
Add a comment
|
1 Answer
GnuPG uses an algorithm called S2K (String-to-Key). This isn't unique to GnuPG, and is actually part of the official OpenPGP standard, specifically RFC 4880 § 3.7. The strongest version of this KDF, version 3, works by repeating the key and the salt many times and hashing the whole result.
The specific hash algorithm used is specified with --s2k-digest-algo.
