AGWA / AGWA/git-crypt

Support for other PGP implementations and remote keys

Ouverte
#239 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
feature
Langage dominant
C++
Étoiles
9.9k
Forks
544
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

It is nice that git-crypt reads the gpg executable from the git config `gpg.program` configuration.
This allows one to interface with other PGP implementations, as soon as the desired commands can be rewritten in terms of `gpg` CLI. For instance, we achieved this with a [fork](https://github.com/fortanix/sq-dsm) of [Sequoia-PGP](https://sequoia-pgp.org/) that allows to keep keys inside an HSM, instead of local keys.

It would be even nicer to either
- be able to interface directly with `sq`
- interface with any implementation of [SOP](https://tools.ietf.org/id/draft-dkg-openpgp-stateless-cli-00.html) (which includes at least 8 PGP implementations, including gpg - see [this](https://tests.sequoia-pgp.org/))

Apologies if this has been already discussed/considered.

Guide de contribution

Ouvrir le guide de contribution

Piste de recherche

Start by reviewing git-crypt's existing handling of the git config gpg.program setting, then compare the command requirements of sq and SOP described in the issue. Done means the project has a decided and tested approach for interfacing with alternative PGP implementations and remote or HSM-held keys.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Évaluation

Stack technique
cpp, git
Domaine
cryptography, security
Type d'issue
Fonctionnalité
Difficulté
5/5
Temps estimé
Plus d'une semaine
Activité
À l'abandon
Clarté
Plutôt claire
Accessibilité débutants
25/100

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.