1997493 - Import of public PGP key with experimental packets (e.g. 60) fails without clear error message - should be gracefully ignored

Status: NEW

(MailNews Core :: Security: OpenPGP, defect)

Description

[Dave]

Thunderbird 144.0.1 Windows.

Attempting to import a public PGP key results in the message "Importing the keys failed". Similar for importing from clipboard.
The error console reads "rnp_import_keys failed with rv: 301989888".

gpg imports the key without complaint.

In order to get Thunderbird to accept it I had to import it to gpg then export with gpg --export --armor "username" > key.asc after which Thunderbird accepted it.

I don't want to attach the key here but I can mail it to the relevant person; please let me know.

Comment 1

[Magnus Melin [:mkmelin]]

Tried the key

export RNP_LOG_CONSOLE=1
thunderbird -P test
[parse_material() /builds/worker/checkouts/gecko/comm/third_party/rnp/src/librepgp/stream-sig.cpp:1420] Unknown pk algorithm : 100
[process_pgp_key_signatures() /builds/worker/checkouts/gecko/comm/third_party/rnp/src/librepgp/stream-key.cpp:243] failed to parse signature at 1571
[process_pgp_key_auto() /builds/worker/checkouts/gecko/comm/third_party/rnp/src/librepgp/stream-key.cpp:341] wrong key tag: 60 at pos 4499

``

Comment 2

[Nickolay Olshevsky]

It appears that some experimental/non-standard algorithm is used for the signature (which is non-exportable by default). You may also run gpg --list-packets key.asc to see the details on that problematic signature.

Comment 3

[Dave]

The key is from the Financial Ombudsman Service, a fairly major UK government-aligned service related to financial complaints.

They apparently use Symantec PGP Gateway to handle all secure communications.

According to Thunderbird the key It was issued in 2014

Comment 4

[Dave]

Oops, accidentally posted a partial reply and can't see any way to edit.

According to Thunderbird the key was issued in 2014, if this has any bearing on its format?

I sent the key to :mkmelin - I'm too uninformed to know if it contains any private information, but if it doesn't, please feel free to post it here or post the output of gpg --list-packets.

In any case, could Thunderbird either provide a more helpful error message or, if appropriate, convert the key to an acceptable format?

Comment 5

[Magnus Melin [:mkmelin]]

I've sent the info to Nickolay.

Comment 6

[Magnus Melin [:mkmelin]]

Nickolay identified the cause. https://github.com/rnpgp/rnp/issues/2379