tag:gpgtools.tenderapp.com,2011-11-04:/discussions/problems/59310-gpg-keychain-password-length-is-limited-to-100-characters-or-lessGPGTools: Discussion 2018-03-26T15:54:53Ztag:gpgtools.tenderapp.com,2011-11-04:Comment/436871662017-10-06T17:24:37Z2017-10-06T17:24:38ZGPG Keychain: Password length is limited to 100 characters or less<div><p>I'm reposting my screenshot here, just for ease and clarity.</p></div>ProxyCelltag:gpgtools.tenderapp.com,2011-11-04:Comment/436871662017-12-10T12:01:08Z2017-12-10T12:01:08ZGPG Keychain: Password length is limited to 100 characters or less<div><p>Hi Proxy,</p>
<p>your issue is addresses in our latest version of GPG Suite 2017.2<br>
It would be great if you could install it and confirm that the issue is resolved.<br>
<a href="https://gpgtools.org">https://gpgtools.org</a></p>
<p>Thanks!</p></div>Luke Letag:gpgtools.tenderapp.com,2011-11-04:Comment/436871662017-12-10T17:38:27Z2017-12-10T17:38:28ZGPG Keychain: Password length is limited to 100 characters or less<div><p>Hi Luke Le,</p>
<p>I installed the 2017.2 update through the in-app updater about a day or so ago when it popped up on it's own.</p>
<p>Today I gave it a try and attempted to create a new key with a password length longer than 100 characters and it failed again. I used a password of exactly 101 characters in length and I can confirm that it does still work when using one of 100 characters long.</p>
<p>It displayed the exact same error message though, still saying 300. I dug through the commits on GitHub and found that back in June the max of 300 was changed to 100 in /Source/SheetController.m and the English localization title and message object names were also changed at the same time but the "300" was not amended to "100"</p>
<p>However in the more recent commit 10 days ago it was changed:<br>
<a href="https://github.com/GPGTools/GPGKeychainAccess/commit/9397b115e3baffaafc7470815af24197e555361a">https://github.com/GPGTools/GPGKeychainAccess/commit/9397b115e3baff...</a></p>
<p>Sadly, this is NOT included in the current 2017.2 distributed installer package. I checked in my own local /Applications/GPG.../Resources/en.lproj/Localizable.strings and it still has "300" there.</p>
<p>I reinstalled the entire 2017.2 and it is still "300" so my best guess is that these latest changes were not included as they came in after the 1.4.1 GPG Keychain version change in the "/Version.config" file yet happened on the exact same date.</p>
<p>Otherwise I am also curious as to why it was reduced in the code from 300 to 100? Is there a technical reason for why it was changed?</p></div>ProxyCelltag:gpgtools.tenderapp.com,2011-11-04:Comment/436871662017-12-14T12:30:51Z2017-12-14T12:30:51ZGPG Keychain: Password length is limited to 100 characters or less<div><p>Hi ProxyCell,</p>
<p>you are absolutely correct that this change didn't make it into the release. I believed it did. The nightly which you can find under the following URL now does include the matching passphrase restrictions:<br>
<a href="https://releases.gpgtools.org/nightlies">https://releases.gpgtools.org/nightlies</a></p>
<p>We have adjusted the passphrase length in accordance with the official GnuPG distribution. Unfortunately I cannot find the pretty long email thread on the GnuPG developer list discussing this change.</p></div>Luke Le