GnuPG is a faithful implementation of OpenPGG, a protocol has been heavily scrutinized. It hasn’t had many CVEs (similar number to SSH and OpenVPN). So I trust

GnuPG is a faithful implementation of OpenPGG, a protocol has been heavily scrutinized. It hasn’t had many CVEs (similar number to SSH and OpenVPN). So I trust this software. The command line is easy enough. The newer versions provide AEAD ciphers, and the software is well supported and maintained. There is some complexity in the man page with many flags, the documentation and the OpenPGP packet format. The KDF is not modern, and old ciphers are still supported. Other than than that, it’s fine.