3 ms·
What if PGP was updated to remove the old cipher suites and only support modern ones like Curve25519 Poly1305 ChaCha20 etc? (At least for newly created keys/sig
by yardstick 8y ago
What if PGP was updated to remove the old cipher suites and only support modern ones like Curve25519 Poly1305 ChaCha20 etc? (At least for newly created keys/sigs/encrypted files)
The aspect of PGP I like is the UI integration. At least when using GPG Tools. I can double click on an asymmetric encrypted file and GPG tools will decrypt it. Likewise my mail client can encrypt/decrypt/sign/verify emails automatically with GPGs plugin.
If there’s a straightforward equivalent for modern crypto that is easy for users to install and use, let me know because I’d be interested in using it.
- kazinator 8y agoThen it will stop working for the users who have keys and data in those crypto-systems. They will have to use old, unmaintained versions of the software.
- yardstick 8y agoNot necessarily, it could support working with legacy algorithms to decrypt & verify old content. But any new content— any encrypt or sign- would only support modern crypto and associated features (eg newly encrypted files must be armoured / integrity checked, which I believe is optional now). Users would need to upgrade their PGP tool sets, but all their old data would still work. The point I was trying to drive at is all these other tools/suggestions lack a good user experience and ease of integration. GPG Tools offers the best integration for PGP I’ve seen, and is actually half decent. If there’s a modern tool with modern crypto, easy to use, easy to integrate into mail and file management UI (Explorer/Finder/etc) then I’m all ears.
- afiori 8y agobut then also the new systems would not work for them.
- Boulth 8y agoOpenPGP is actually adding stuff. Quite a lot of people use Curve 25519 PGP keys already (e.g. GnuPG and ProtonMail support it).