Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 7 Dec 2017 22:15:59 +0100
From: Peter Bex <>
Subject: Re: Recommendations GnuPG-2 replacement

On Thu, Dec 07, 2017 at 10:01:34PM +0100, Solar Designer wrote:
> On Thu, Dec 07, 2017 at 03:15:06PM +0000, Jeremy Stanley wrote:
> > Sounds like my use case is likely not your use case, so perhaps you
> > should look at the signify utility OpenBSD developed for this
> > purpose instead? It's included in Debian since Stretch under the
> > package name "signify-openbsd" and seems to work well; I've used it
> > semi-regularly as I tend to do a lot of cross-platform things in a
> > mixed Debian/OpenBSD environment.
> There's also asignify:

As for free GPG-compatible alternatives, I happened to remember that
years ago, NetBSD was working on their own BSD-licensed PGP
implementation as a GSoC project, but it never really went anywhere.
Looks like that finally exists now:

I don't know if it's any good or if it can be easily ported to Linux
but it could be worth investigating if you really want to avoid GPG,
and it should probably be a lot simpler.


Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.