Pretty Curved Privacy
github.com
Pretty Curved Privacy
1–10 of 47 posts
Re: Pretty Curved Privacy
#2I was sure I'd came across this on HN, but apparently I found it when I wondered if anyone had taken a crack at taking NaCl and made a PGP work-alike using the primitives NaCl provides. And here it is. Anyone have any experience with it? Done a cursory review?
At this point I'm a fan of the idea (a set of protocols to mirror some of the good parts of PGP, married with the good parts of NaCl. At least in ... theory...).
Re: Pretty Curved Privacy
#3Could somebody please change the URL to https://github.com/TLINDEN/pcp instead?
Re: Pretty Curved Privacy
#4back in the days i consulted with tom on pcp a bit. Why, because i took it a bit further with: https://github.com/stef/pbp - there's even an axolotl implementation available - but not integrated yet: https://github.com/stef/saxolotl
Re: Pretty Curved Privacy
#5back in the days i consulted with tom on pcp a bit. Why, because i took it a bit further with: https://github.com/stef/pbp - there's even an axolotl implementation available - but not integrated yet: https://github.com/stef/saxolotl
also there will be soon (in 1-2 months) a hardware token available based on this. look for project: PITCHFORK
Re: Pretty Curved Privacy
#6back in the days i consulted with tom on pcp a bit. Why, because i took it a bit further with: https://github.com/stef/pbp - there's even an axolotl implementation available - but not integrated yet: https://github.com/stef/saxolotl
i also gave a talk on pbp: https://www.youtube.com/watch?v=Kl_gLMef1mI
Re: Pretty Curved Privacy
#7If you need a "real" PGP, GnuPG 2.1 has had experimental support for Curve25519 since 2014. In the most recent version the experimental warning label was gone, so it should be pretty stable by now. Many keyservers still barf on the keys though.
Re: Pretty Curved Privacy
#8Could somebody please change the URL to https://github.com/TLINDEN/pcp instead?
Yes please, a typo must've snuck in when I pasted into the url-field.
Re: Pretty Curved Privacy
#9If you need a "real" PGP, GnuPG 2.1 has had experimental support for Curve25519 since 2014. In the most recent version the experimental warning label was gone, so it should be pretty stable by now. Many keyservers still barf on the keys though.
the problem is not that "pgp doesn't use 25519" the problem is the openpgp format as per rfc4880 and the whole thing being from the naive nineties, not suited for advanced adversaries we have since then.