[cryptography] OpenPGP in Python: Security evaluations?

Fabio Pietrosanti (naif) - lists lists at infosecurity.ch
Thu Apr 23 02:25:14 EDT 2015



On 4/21/15 2:41 PM, John Downey wrote:
> This doesn't answer your question but GnuPG has a library interface
> called GPGME, or GPG Made Easy. To quote the GnuPG site, "GPGME is the
> standard library to access GnuPG functions from programming languages."
> 
> Can you use one of the Python bindings to GPGME?
> 
> https://wiki.python.org/moin/GnuPrivacyGuard#Accessing_GnuPG_via_gpgme

Unluckily PyMe is unmaintained and there's no major software using GPGMe
interface.

Everyone, including GlobaLeaks, is using python-gnupg wrapper but that's
an HORRIBLE software design choice (having a wrapper that fire an
executable) and we want to fix that.

Today a pure-python version, such as PGPy and OpenPGP-Python, sounds
like a valuable alternative.

Both are based on python-cryptography for crypto algorithm
implementation, so it shall be safe enough w.t.r. to encryption
functionality itself? .



-- 
Fabio Pietrosanti (naif)
HERMES - Center for Transparency and Digital Human Rights
http://logioshermes.org - https://globaleaks.org - https://tor2web.org -
https://ahmia.fi


More information about the cryptography mailing list