3 ms·
I’m not sure I understand why Protonmail forked the Go crypto library here. Did they fork the entire thing and make substantial changes/updates throughout, or d
by throwawaymath 7y ago
I’m not sure I understand why Protonmail forked the Go crypto library here. Did they fork the entire thing and make substantial changes/updates throughout, or did they just make changes to the PGP implementation available in Go/crypto?
Go/crypto already implements elliptic curve cryptography[1], so I’m curious which specific elliptic curve primitives (or algorithms) they added to their fork.
________
1. https://golang.org/pkg/crypto/ https://golang.org/pkg/crypto/
- tgragnato 7y agohttps://github.com/ProtonMail/crypto/issues/21 https://github.com/ProtonMail/crypto/issues/21 https://github.com/golang/crypto/compare/master...ProtonMail:master https://github.com/golang/crypto/compare/master...ProtonMail... They changed defaults. 570d0c5fa7ef500786f15958b39af43af3359719 is interesting: "Add secp256k1 / x25519 / brainpool curves to openpgp".
- w8rbt 7y agoGo wanted to deprecate OpenPGP support. But, it looks as if they have walked that back a lot: https://github.com/golang/go/issues/30141 https://github.com/golang/go/issues/30141 "We will be deprecating the packages listed above, except openpgp/, otr/ and xts/. I'll update the proposal and send a CL shortly."