News for hackers. Stuff that matters.

A comment on Hard Rust requirements from May onward for all Debian ports. Parent comment

Re:Hard Rust requirements from May onward for all Debian ports by bgwalter on Saturday November 01, 2025 @04:53PM (#45785242)
If you mean GnuPG, that is what Snowden used. It could be better than new software that may have new bugs. Memory safety is a very small part of cryptographic safety.

(New cryptographic software can also be developed by all sorts of people. In this case I'm not familiar, but we do know that GnuPG worked for the highest profile case imaginable.)

[ Parent | on HN ]
Re:Hard Rust requirements from May onward for all Debian ports by pclmulqdq on Saturday November 01, 2025 @06:09PM (#45785874)
GPG works great if you use it to encrypt and decrypt emails manually as the authors intended. The PGP/GPG algorithms were never intended for use in APIs or web interfaces.

Ironically, it was the urge not to roll your own cryptography that got people caught in GPG-related security vulnerabilities.

[ Parent | on HN ]