Unable to load eddsa key

[pavriet-boxtal]

Hi, I'm trying to load an eddsa ed25519 key with PGPKey.from_blob method, but it's raising a pgpy.errors.PGPError: 14 is not a valid HashAlgorithm exception.

Key is valid as I was able to load it with the os gpg command.

I have no idea what is going on. I check the doc and here it says that eddsa is implemented ? https://pgpy.readthedocs.io/en/latest/progress.html?highlight=eddsa

python 3.11.1
pgpy 0.6.0

  File "/home/user/.cache/pypoetry/virtualenvs/venv/lib/python3.11/site-packages/pgpy/types.py", line 195, in from_blob
    po = obj.parse(bytearray(blob, 'latin-1'))
         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/user/.cache/pypoetry/virtualenvs/venv/lib/python3.11/site-packages/pgpy/pgp.py", line 2647, in parse
    [ operator.ior(pgpobj, PGPSignature() | sig) for sig in group if not isinstance(sig, Opaque) ]
  File "/home/user/.cache/pypoetry/virtualenvs/venv/lib/python3.11/site-packages/pgpy/pgp.py", line 2647, in <listcomp>
    [ operator.ior(pgpobj, PGPSignature() | sig) for sig in group if not isinstance(sig, Opaque) ]
  File "/home/user/.cache/pypoetry/virtualenvs/venv/lib/python3.11/site-packages/pgpy/pgp.py", line 2617, in _getpkt
    return Packet(d) if d else None
           ^^^^^^^^^
  File "/home/user/.cache/pypoetry/virtualenvs/venv/lib/python3.11/site-packages/pgpy/types.py", line 542, in __call__
    raise PGPError(str(ex)) from ex
pgpy.errors.PGPError: 14 is not a valid HashAlgorithm

[adiroiban]

Here is a possible fix. It just ignores unknown packets and handles them as opaque

In my case, the error was caused by OpenPGP.js salt notation packets.

You can generate keys with OpenPGP.js via this website https://inventivehq.com/tools/security/pgp-key-generator

Here is an example key. Note that the key has some unicode text.

$ gpg --list-packets test_pgp.txt 
# off=0 ctb=c6 tag=6 hlen=2 plen=82 new-ctb
:public key packet:
        version 4, algo 19, created 1787565319, expires 0
        pkey[0]: [72 bits] nistp256 (1.2.840.10045.3.1.7)
        pkey[1]: [515 bits]
        keyid: 43DBF67EBA6440A0
# off=84 ctb=cd tag=13 hlen=2 plen=42 new-ctb
:user ID packet: "Te\xc8\x99t Name (Some comen\xc8\x9b) <test@email.com>"
# off=128 ctb=c2 tag=2 hlen=3 plen=217 new-ctb
:signature packet: algo 19, keyid 43DBF67EBA6440A0
        version 4, created 1787565319, md5len 0, sigclass 0x13
        digest algo 10, begin of digest 98 2a
        critical hashed subpkt 2 len 4 (sig created 2026-08-24)
        critical hashed subpkt 9 len 4 (key expires after 2y0d0h0m)
        hashed subpkt 11 len 2 (pref-sym-algos: 9 7)
        hashed subpkt 16 len 8 (issuer key ID 43DBF67EBA6440A0)
        hashed subpkt 20 len 68 (notation: salt@notations.openpgpjs.org=[not human readable])
        hashed subpkt 21 len 4 (pref-hash-algos: 10 8 14 12)
        hashed subpkt 22 len 3 (pref-zip-algos: 0 2 1)
        hashed subpkt 25 len 1 (primary user ID)
        critical hashed subpkt 27 len 1 (key flags: 03)
        hashed subpkt 30 len 1 (features: 01)
        hashed subpkt 33 len 21 (issuer fpr v4 87A940BBCC2103BABE030B2243DBF67EBA6440A0)
        data: [256 bits]
        data: [255 bits]
# off=348 ctb=ce tag=14 hlen=2 plen=86 new-ctb
:public sub key packet:
        version 4, algo 18, created 1787565319, expires 0
        pkey[0]: [72 bits] nistp256 (1.2.840.10045.3.1.7)
        pkey[1]: [515 bits]
        pkey[2]: [32 bits]
        keyid: 77202ED8B142DD18
# off=436 ctb=c2 tag=2 hlen=3 plen=196 new-ctb
:signature packet: algo 19, keyid 43DBF67EBA6440A0
        version 4, created 1787565319, md5len 0, sigclass 0x18
        digest algo 10, begin of digest 4d df
        critical hashed subpkt 2 len 4 (sig created 2026-08-24)
        critical hashed subpkt 9 len 4 (key expires after 2y0d0h0m)
        hashed subpkt 16 len 8 (issuer key ID 43DBF67EBA6440A0)
        hashed subpkt 20 len 68 (notation: salt@notations.openpgpjs.org=[not human readable])
        critical hashed subpkt 27 len 1 (key flags: 0C)
        hashed subpkt 33 len 21 (issuer fpr v4 87A940BBCC2103BABE030B2243DBF67EBA6440A0)
        data: [256 bits]
        data: [256 bits]

---

diff --git a/pgpy/packet/subpackets/signature.py b/pgpy/packet/subpackets/signature.py
index a68a0bd..0b04ce5 100644
--- a/pgpy/packet/subpackets/signature.py
+++ b/pgpy/packet/subpackets/signature.py
@@ -111,7 +111,11 @@ class FlagList(Signature):
         if self.__flags__ is None:  # pragma: no cover
             raise AttributeError("Error: __flags__ not set!")
 
-        self._flags.append(self.__flags__(val))
+        try:
+            self._flags.append(self.__flags__(val))
+        except ValueError:
+            # Preserve unknown values as opaque numeric IDs.
+            self._flags.append(val)
 
     @flags.register(bytearray)
     def flags_bytearray(self, val):
diff --git a/pgpy/pgp.py b/pgpy/pgp.py
index f34a25f..9dc47db 100644
--- a/pgpy/pgp.py
+++ b/pgpy/pgp.py
@@ -70,6 +70,7 @@ from .packet.packets import SKESessionKey
 from .packet.packets import SKESessionKeyV4
 
 from .packet.types import Opaque
+from .packet.types import Header as PacketHeader
 
 from .types import Armorable
 from .types import Fingerprint
@@ -2614,7 +2615,32 @@ class PGPKey(Armorable, ParentRef, PGPObject):
 
         ##TODO: see issue #141 and fix this better
         def _getpkt(d):
-            return Packet(d) if d else None
+            """
+            Return the next packet from `d`.
+
+            If normal parsing fails, fallback to an opaque packet and consume
+            exactly one raw packet from the buffer.
+            """
+            if not d:
+                return None
+
+            snapshot = bytearray(d)
+
+            try:
+                return Packet(d)
+            except PGPError:
+                # Restore the input so we can consume one full raw packet.
+                d[:] = snapshot
+
+                hdr = PacketHeader()
+                hdr.parse(d)
+
+                op = Opaque()
+                op.header = hdr
+                op.payload = d[:hdr.length]
+                del d[:hdr.length]
+                return op
+
         # some packets are filtered out
         getpkt = filter(lambda p: p.header.tag != PacketTag.Trust, iter(functools.partial(_getpkt, data), None))