From 01b5aa5984d60ae0b294feedcb0ab7e6c7b42b71 Mon Sep 17 00:00:00 2001
From: NIIBE Yutaka <gniibe@fsij.org>
Date: Thu, 2 Nov 2017 13:53:06 +0900
Subject: [PATCH] Enable KDF-DO available bit.

---
 ChangeLog        | 2 ++
 src/openpgp-do.c | 4 +++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 673a76e..8c7ee0c 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -4,6 +4,8 @@
 	(gpg_do_get_initial_pw_setting): New.
 	(gpg_do_write_prvkey): Use gpg_do_get_initial_pw_setting.
 	(gpg_do_keygen): Likewise.
+	(extended_capabilities): Enable KDF-DO available bit.
+
 	* src/openpgp.c (cmd_change_password): Use
 	gpg_do_get_initial_pw_setting.
 	* src/ac.c (verify_user_0, verify_admin_0): Likewise.
diff --git a/src/openpgp-do.c b/src/openpgp-do.c
index b78be72..cc4289d 100644
--- a/src/openpgp-do.c
+++ b/src/openpgp-do.c
@@ -112,13 +112,15 @@ const uint8_t historical_bytes[] __attribute__ ((aligned (1))) = {
 /* Extended Capabilities */
 static const uint8_t extended_capabilities[] __attribute__ ((aligned (1))) = {
   10,
-  0x74,				/*
+  0x75,				/*
 				 * No Secure Messaging supported
 				 * GET CHALLENGE supported
 				 * Key import supported
 				 * PW status byte can be put
 				 * No private_use_DO
 				 * Algorithm attrs are changable
+				 * No DEC with AES
+				 * KDF-DO available
 				 */
   0,		  /* Secure Messaging Algorithm: N/A (TDES=0, AES=1) */
   0x00, CHALLENGE_LEN, 		/* Max size of GET CHALLENGE */