Download GnuPG 2.4.0

Version 2.4.0 of GnuPG has been released. GnuPG stands for GNU Privacy Guard and is often abbreviated to GPG. This is a collection of tools for securing communication flows and data. It can be used to encrypt data and create digital signatures, and to provide a framework for public key cryptography. It supports both OpenPGP and s/mime standards. For more information, please refer to this page. The most important changes made in this release are listed below.

Noteworthy changes in version 2.4.0

• gpg: New command –quick-update-pref. [rGd40d23b233]
• gpg: New list options show-pref and show-pref-verbose. [rG811cfa34cb]
• gpg: New option –list-filter to restrict key listings like gpg -k –list-filter ‘select=revoked-f && sub/algostr=ed25519’ [rG1324dc3490]
• gpg: New –export-filter export-revocs. [rGc985b52e71]
• gpg: Also import stray revocation certificates. [rG7aaedfb107]
• gpg: Add a notation to encryption subkeys in de-vs mode. [T6279]
• gpg: Improve signature verification speed by a factor of more than four. Double detached signing speed. [T5826]
• gpg: Allow only OCB for AEAD encryption. [rG5a2cef801d]
• gpg: Fix trusted introducer for mbox only user-ids. [T6238]
• gpg: Report an error via status-fd for receiving a key from the agent. [T5151]
• gpg: Make –require-compliance work without the –status-fd option. [rG2aacd843ad]
• gpg: Fix verification of cleartext signatures with overlong lines. [T6272]
• agent: Fix import of protected OpenPGP v5 keys. [T6294]
• gpgsm: Change the default cipher algorithm from AES128 to AES256. Also announce support for this in signatures. [rG2d8ac55d26]
• gpgsm: Always use the chain validation model if the root CA requests this. [rG7fa1d3cc82]
• gpgsm: Print OCSP revocation date and reason in cert listings. [rGb6abaed2b5]
• agent: Support Win32-OpenSSH emulation by gpg-agent. [T3883]
• scd: Support the Telesec Signature Card v2.0. [T6252]
• scd: Redact –debug cardio output of a VERIFY APDU. [T5085]
• scd: Skip deleted pkcs#15 records in CARDOS 5. [rG061efac03f]
• dirmngr: Fix build with no LDAP support. [T6239]
• dirmngr: Fix verification of ECDSA signed CRLs. [rG868dabb402]
• wkd: New option –add-revocs for gpg-wks-client. [rGc3f9f2d497]
• wkd: Ignore expired user-ids in gpg-wks-client. [T6292]
• card: New commands “gpg” and “gpgsm”. [rG9c4691c73e]