GopenPGP, an open source encryption library for native applications

Re:GopenPGP, an open source encryption library for native ap... by throwawaymath on Thursday May 16, 2019 @09:59AM (#19929094)

I’m not sure I understand why Protonmail forked the Go crypto library here. Did they fork the entire thing and make substantial changes/updates throughout, or did they just make changes to the PGP implementation available in Go/crypto?

Go/crypto already implements elliptic curve cryptography[1], so I’m curious which specific elliptic curve primitives (or algorithms) they added to their fork.

________

1. https://golang.org/pkg/crypto/

[ Parent | on HN ]

Re:GopenPGP, an open source encryption library for native ap... by w8rbt on Thursday May 16, 2019 @01:07PM (#19930775)

Go wanted to deprecate OpenPGP support. But, it looks as if they have walked that back a lot:

https://github.com/golang/go/issues/30141

"We will be deprecating the packages listed above, except openpgp/, otr/ and xts/.

I'll update the proposal and send a CL shortly."

[ Parent | on HN ]

Re:GopenPGP, an open source encryption library for native ap... by tgragnato on Thursday May 16, 2019 @11:13AM (#19929741)

https://github.com/ProtonMail/crypto/issues/21

https://github.com/golang/crypto/compare/master...ProtonMail...

They changed defaults. 570d0c5fa7ef500786f15958b39af43af3359719 is interesting: "Add secp256k1 / x25519 / brainpool curves to openpgp".

[ Parent | on HN ]