Mandos-client fails decode

[Dick Middleton]

I'm now using mandos-client 1.7.3 on a Stretch system.

If I test mandos-client fetching passcode it is successful.  However at boot
time it consistently fails to unlock the disk.  It reports:

bad gpme_op_decode: GPME decryption failed

I get these symptoms on another system too.  This other system is a Via
mini-itx thingy which is relatively slow 1.2GHz 32bit x86 cpu.  Also running
Stretch with mandos-client 1.7.3.

When testing mandos-client on this slow machine it can take up to 3mins to get
the passphrase.  During this time it is running at 100% cpu.

Using debug these are the last message shown during that time:

Mandos plugin mandos-client: This OpenPGP key implies using a GnuTLS security
parameter "High".
Mandos plugin mandos-client: A "High" GnuTLS security parameter implies 3072
DH bits; using that.

and when the time is up it is followed by this:

Mandos plugin mandos-client: Tempdir /run/tmp/mandosMYxeRj did not work,
trying /tmp/mandosXXXXXX

I took the trouble of regenerating the dhparams but it makes no difference.

As I mentioned I'm using Stretch (not Sid) and I'm wondering if there's some
other significant difference. I've only seen these problems on Stretch. Jessie
worked OK.   Would reporting problem using reportbug help?

Dick

-- 
Dick Middleton
dick at lingbrae.com