News for hackers. Stuff that matters.

A comment on Cryptographic Right Answers. Parent comment

Re:Cryptographic Right Answers by JoshTriplett on Saturday May 23, 2015 @05:08PM (#9594380)
> Avoid if possible. The code was written by a colony of drunk monkeys, in an era before anyone understood the basics of modern cryptography; I'm really not sure which is worse between gnupg and OpenSSL. Of course, GPG is the standard for encrypted email, just like SSL/TLS is the standard for web sites, so you may have no choice...

Are there any viable FOSS implementations of the OpenPGP standard other than GPG? Detached GPG signatures seem to be the most common mechanism to validate software distribution and similar.

[ Parent | on HN ]
Re:Cryptographic Right Answers by wolf550e on Saturday May 23, 2015 @05:17PM (#9594416)
Has anyone checked https://github.com/google/end-to-end ? I want to believe google did their due diligence.
[ Parent | on HN ]
Re:Cryptographic Right Answers by elithrar on Saturday May 23, 2015 @06:03PM (#9594554)
Go's crypto/openpgp package (http://golang.org/x/crypto/openpgp) is probably one of the closest "full" implementations, although it's a library and not a CLI binary.
[ Parent | on HN ]