[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#972796: buster-pu: package gajim-omemo/2.6.27-1+deb10u1



On Fri, 2020-10-23 at 22:52 +0200, Martin wrote:
> I like to update the gajim-omemo package, so that it becomes
> compatible with iOS Jabber/XMPP clients.
> 
> Background: iOS devices can only accept a 12 bytes IV in OMEMO,
> because of limitations in system libraries, while most others
> can live with both 12 and 16 bytes. Nowadays, (almost) all XMPP
> clients use 12 bytes, and it would be good, if Debian stable
> would support that.
> 
> (IV = initialization vector for AES-GCM, IIRC)

AIUI 96 bytes (i.e. 12 bytes) is the recommended IV size for AES 128
GCM in any case.

> The same change is in Debian testing since 2020-02-24, but for
> buster I backported only that specific change.

Well, except for:

> Packaging changes:
> 
> Move from debian/compat to debhelper-compat.

Why was that included in a stable update? While it might make no
functional difference, it also fixes no bug that I can see and isn't
related to the bug you're addressing.

As a general note, as a user-facing item:

+  * add patch: Switch to 12 byte IV

it would have been worth specifying _why_ this change was applied, i.e.
that it improves compatibility with clients.

Regards,

Adam


Reply to: