Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

switch to openpgp fork #925

Closed
wants to merge 2 commits into from
Closed

switch to openpgp fork #925

wants to merge 2 commits into from

Conversation

Mic92
Copy link
Contributor

@Mic92 Mic92 commented Aug 29, 2021

upstream no longer maintains this library:
golang/go#44226
Hence bugfixes that are not security relevant are unlikely to get fixed
as well as new features.
Hence this commit switches to protonmail's fork, which is still
regularly updated: https://github.com/ProtonMail/go-crypto

upstream no longer maintains this library:
golang/go#44226
Hence bugfixes that are not security relevant are unlikely to get fixed
as well as new features.
Hence this commit switches to protonmail's fork, which is still
regularly updated: https://github.com/ProtonMail/go-crypto
@Mic92 Mic92 changed the base branch from master to develop August 29, 2021 16:18
@Mic92
Copy link
Contributor Author

Mic92 commented Aug 29, 2021

I don't expect this to have an impact on binary size since it just replaces the original openpgp library.

@Enrico204
Copy link
Contributor

Any improvement changing the library? I mean, is sops having bugs caused by the openpgp library? The current library will be updated in case of any security issue, and it seems quite stable

@Mic92
Copy link
Contributor Author

Mic92 commented Sep 27, 2021

I am not following development too closely, as I am preparing to switch to age. There are a bunch of bugfixes as you can see here, especially for elliptic curve algorithms: https://github.com/ProtonMail/go-crypto/pulls?page=1&q=is%3Apr+is%3Aclosed

@Mic92 Mic92 closed this Mar 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants