Is there a thing that has modes of work akin to OpenPGP but without its baggage? I mean this: decentralised/web of trust (there exist cases when not having to

Is there a thing that has modes of work akin to OpenPGP but without its baggage? I mean this: decentralised/web of trust (there exist cases when not having to have a CA is a feature), can work in offline mode, uses asymmetric encryption, can use hardware keys, is suitable for email.