Support for other PGP implementations and remote keys
- Langage dominant
- C++
- Étoiles
- 9.9k
- Forks
- 544
- Métriques de merge des PR
- Aucune PR mergée en 30 j
Description
It is nice that git-crypt reads the gpg executable from the git config `gpg.program` configuration.
This allows one to interface with other PGP implementations, as soon as the desired commands can be rewritten in terms of `gpg` CLI. For instance, we achieved this with a [fork](https://github.com/fortanix/sq-dsm) of [Sequoia-PGP](https://sequoia-pgp.org/) that allows to keep keys inside an HSM, instead of local keys.
It would be even nicer to either
- be able to interface directly with `sq`
- interface with any implementation of [SOP](https://tools.ietf.org/id/draft-dkg-openpgp-stateless-cli-00.html) (which includes at least 8 PGP implementations, including gpg - see [this](https://tests.sequoia-pgp.org/))
Apologies if this has been already discussed/considered.
Guide de contribution
Ouvrir le guide de contribution
Piste de recherche
Start by reviewing git-crypt's existing handling of the git config gpg.program setting, then compare the command requirements of sq and SOP described in the issue. Done means the project has a decided and tested approach for interfacing with alternative PGP implementations and remote or HSM-held keys.
Rédigé par le modèle d'indexation à partir du texte de l'issue.
Évaluation
- Stack technique
- cpp, git
- Domaine
- cryptography, security
- Type d'issue
- Fonctionnalité
- Difficulté
- 5/5
- Temps estimé
- Plus d'une semaine
- Activité
- À l'abandon
- Clarté
- Plutôt claire
- Accessibilité débutants
- 25/100