Skip to content

Feat: regenerate key and decryption interoperability

ayoyo requested to merge (removed):feat_regenerate_key_and_decryption_interoperability into master

  1. Key regeneration (see also !46 (closed)):

    • the current key pair is extended for 1 day if already expired
    • the current private key is deactivated, the public key removed and a new key pair is generated
    • the new key pair is signed with the old key pair
    • all public keys in the storage are reset to have the flag 'sign_used' to be False

  2. Decryption interoperability:

    • get_key returns the active key and if queried, will return only one private inactive key that is the key expiring last among all inactive keys... although all private keys are kept and not deleted.
    • If decryption fails with the current active key, then it is tried with the inactive key, if there is one.

Merge request reports