oss-sec mailing list archives

Re: Recommendations GnuPG-2 replacement


From: Marcus Brinkmann <marcus.brinkmann () ruhr-uni-bochum de>
Date: Fri, 8 Dec 2017 00:51:50 +0100

Hi,

I started neopg.io two months ago to provide a modern replacement for
GnuPG.  It will go back to a single-binary architecture like gpg1 was,
but move forward on just about every other issue:

* Written in C++
* based on the Botan crypto library instead of libgcrypt
* typical library + CLI (with subcommands) architecture
* better testing (CI, static analysis)

In the beginning, things will be somewhat unstable as I am cleaning up
and restructuring the internals completely, but I try to keep every
commit a somewhat running version (currently keyserver lookup is broken
because I am not registering the root certificate of the keyserver CA -
yes, openpgp keyservers have their own self-signed root CA).

You can follow the progress on neopg.io and the resources linked from
there.  I am keen on documenting the changes and the reasons for them as
I go along.  I am open to suggestions, just open an issue on GitHub.

Thanks,
Marcus


Current thread: