Re:Modern Alternatives to PGP
by g45y45 on Friday February 15, 2019 @04:25PM
(#19174875)
A problem I have run into with x25519 and ed25519 is that in Nacl, both use different public key 'formats'. While they are the same curve, you cannot use an x25519 for signing (ed25519 only) and you cannot use an ed25519 for encryption. PGP allows binding encryption and signing keys together in a profile. So far I have not been able to 'bind' an ed25519/x25519 key in a similar configuration.
[ Parent
| on HN ]
Re:Modern Alternatives to PGP
by justincormack on Friday February 15, 2019 @04:30PM
(#19174909)
It is not recommended to use any keys for more than one purpose any more, this can allow attacks. So this is by design.
Right, but how does one bind the keys if they do not mutually support encryption or signing
PGP never uses the same key for both either. A PGP "key" is a signing key and a decryption key bundled together and then signed by the signing key.
Re:Modern Alternatives to PGP
by throwaway415415 on Friday February 15, 2019 @09:43PM
(#19176688)
It's not by design. There are stuff like decaf, ristretto and qDSA which "fix" this
Re:Modern Alternatives to PGP
by tedunangst on Friday February 15, 2019 @04:38PM
(#19174971)
How hard is it to cat two keys together in a profile?
binding needs more than a simple cat. You want to wrap them together somehow
My point is that you need to roll your own cryptosystem, whereas PGP, for all its flaws, is a working, IND-CCA2 secure cryptosystem (provided you use the correct primitives). This whole blog is justification for removing PGP from Golang stdlib. I dont agree with Valsorda deprecating this.
Its never been part of the stdlib, its part of x/crypto. They also aren't going to remove it, just deprecate it.