- Devel - lists.sequoia-pgp.org

Sequoia v0.20.0 released
by Justus Winter 14 Oct '20

14 Oct '20

We have just released version 0.20.0 of Sequoia. The release includes the low-level crate [`sequoia-openpgp`], a program to verify detached signatures geared towards software distribution systems called [`sqv`], and a commandline frontend for Sequoia implementing the [Stateless OpenPGP Command Line Interface] called [`sqop`]. [`sequoia-openpgp`]: https://crates.io/crates/sequoia-openpgp [`sqv`]: https://crates.io/crates/sequoia-sqv [`sqop`]: https://crates.io/crates/sequoia-sop [Stateless OpenPGP Command Line Interface]: https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/ If you use Sequoia, please port your code to the latest version and report any problems you encounter. Thank you. # Notable changes The biggest change is that we increased our MSRV (Minimum Supported Rust Version) to Rust 1.46. This allows us to take advantage of new language features, and to use newer version of our dependencies. Furthermore, we continued to hone our API and documentation, made signatures and certificates created using Sequoia more robust, and improved signature and certificate merging. We also improved our continuous integration setup: We build and test Sequoia on Windows using the CNG backend, and build and test every commit to make sure that every intermediate state is good. We also extended and improved the [OpenPGP interoperability test suite] and are incorporating what we learned from the results, and are filing bug reports on other OpenPGP implementations. [OpenPGP interoperability test suite]: https://tests.sequoia-pgp.org/

1 0

sq and keystores
by John Coggeshall 14 Sep '20

14 Sep '20

Hello, I have a question -- I am writing an article on Sequoia for LWN (http://lwn.net) and as part of that I wanted to compile and try out the command line tool (specifically sq). One thing I noticed was that, while I was able to import my PGP keys, etc.. I couldn't seem to be able to USE those PGP keys in the store to encrypt or decrypt messages. The only way I could get it to work was to specify the keyfile using things like --secret-key-file. Is this intended behavior, or am I just missing how this is supposed to work? John -- John Coggeshall (coogle) - john(a)lwn.net - https://lwn.net

2 3

Sequoia 0.19.0 released
by Justus Winter 21 Aug '20

21 Aug '20

We have just released version 0.19.0 of Sequoia. The release includes the low-level crate [`sequoia-openpgp`], a program to verify detached signatures geared towards software distribution systems called [`sqv`], and a commandline frontend for Sequoia implementing the [Stateless OpenPGP Command Line Interface] called [`sqop`]. [`sequoia-openpgp`]: https://crates.io/crates/sequoia-openpgp [`sqv`]: https://crates.io/crates/sequoia-sqv [`sqop`]: https://crates.io/crates/sequoia-sop [Stateless OpenPGP Command Line Interface]: https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/ [OpenPGP interoperability test suite]: https://tests.sequoia-pgp.org/ If you use Sequoia, please port your code to the latest version and report any problems you encounter. Thank you. # Notable changes The big new feature is that Sequoia can now be built to use the [Windows Cryptography API: Next Generation (CNG)] as cryptographic backend on Windows. This makes it easier to build and distribute Sequoia for Windows, as building Nettle requires a POSIXly environment. Furthermore, using CNG reduces your trusted computing base, and will allow us to use cryptographic key stores like HSMs in the future. [Windows Cryptography API: Next Generation (CNG)]: https://docs.microsoft.com/en-us/windows/win32/seccng/cng-portal To select the CNG backend, use `default-features = false`, and explicitly include the `crypto-cng` feature. Currently, the CNG backend requires at least Windows 10. We are in the process of stabilizing the API of the low-level `sequoia-openpgp` crate. To that end, we're going over our documentation, writing more documentation and examples, and slightly amending the API to make it more consistent and easier to use.

1 0

Sequoia 0.18.0 released
by Justus Winter 01 Aug '20

01 Aug '20

We have just released version 0.18.0 of Sequoia. The release includes the low-level crate [`sequoia-openpgp`], a program to verify detached signatures geared towards software distribution systems called [`sqv`], and a commandline frontend for Sequoia implementing the [Stateless OpenPGP Command Line Interface] called [`sqop`]. [`sequoia-openpgp`]: https://crates.io/crates/sequoia-openpgp [`sqv`]: https://crates.io/crates/sequoia-sqv [`sqop`]: https://crates.io/crates/sequoia-sop [Stateless OpenPGP Command Line Interface]: https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/ [OpenPGP interoperability test suite]: https://tests.sequoia-pgp.org/ If you use Sequoia, please port your code to the latest version and report any problems you encounter. Thank you. # Notable changes We are in the process of stabilizing the API of the low-level `sequoia-openpgp` crate. To that end, we're going over our documentation, writing more documentation and examples, and slightly amending the API to make it more consistent and easier to use. Besides that and numerous little improvements, we fixed a [bug in the parser], made certificates created using the `CertificateBuilder` [more compatible] with other implementations, and prepared Sequoia for [more cryptographic backends]. [bug in the parser]: https://gitlab.com/sequoia-pgp/sequoia/-/commit/f598646623655dac80ee5bfafee… [more compatible]: https://gitlab.com/sequoia-pgp/sequoia/-/issues/522 [more cryptographic backends]: https://gitlab.com/sequoia-pgp/sequoia/-/merge_requests/640

1 0

Sequoia 0.17.0 released
by Justus Winter 12 Jun '20

12 Jun '20

We have just released version 0.17.0 of Sequoia. The release includes the low-level crate `sequoia-openpgp`, a program to verify detached signatures geared towards software distribution systems called `sqv`, and a new commandline frontend for Sequoia implementing the [Stateless OpenPGP Command Line Interface] `sqop`. [Stateless OpenPGP Command Line Interface]: https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/ While SOP is not intended for daily use, it is a good way to interact with and explore OpenPGP implementations. SOP is primarily used as abstraction in the [OpenPGP interoperability test suite]. [OpenPGP interoperability test suite]: https://tests.sequoia-pgp.org/ If you use Sequoia, please port your code to the latest version and report any problems you encounter. Thank you. # SOP primer To demonstrate SOP, let's generate a key, and encrypt and decrypt a message: $ sqop generate-key julia(a)example.org > julia.secret.pgp $ sqop extract-cert < julia.secret.pgp > julia.public.pgp First, we generate a key for `julia(a)example.org`. Next, we extract the certificate, i.e. the key without the secret key material. $ echo "a message" | sqop encrypt julia.public.pgp > message.pgp $ sqop decrypt julia.secret.pgp < message.pgp a message Here, we encrypt a message with Julia's certificate, and decrypt it with her key.

1 0

A question about --compression pad
by Stefan Claas 14 May '20

14 May '20

Dear sequoia team, I see that the default parameter for encryption is pad. I assume that the pad function adds some random chars to the final message, prior encryption. I would like to ask, if it makes sense to you, if it would be possible to have an additional integer parameter for pad like --compression pad 1024, or say 2048 etc., which users can use, so that they always can choose an integer value they like, depending on their message size, to always have equal message(s) in size? A use case for that would be the Usenet group alt.anonymous.messages, were users could then post public key encrypted messages, done with a pub key, without a UID, which then would have always the same size. Best regards Stefan -- Signal (Desktop) +4915172173279 https://keybase.io/stefan_claas

2 2

Re: Can not sign messages sq 0.16.0
by Justus Winter 08 May '20

08 May '20

Hi :) Stefan Claas <sac(a)300baud.de> writes: > I recently compiled sq under Debian and Windows 10 and when trying to > sign a message I get this error: > > Error: Failed to build parser > > Caused by: > EOF > > I used these commands: > > sq sign -a --secret-key-file key -o test.txt message.txt Drop the -a. --append is supposed to be used if you have a signed message and you want to append your signature to it. All the best, Justus

2 1

Can not sign messages sq 0.16.0
by Stefan Claas 08 May '20

08 May '20

Hi all, I recently compiled sq under Debian and Windows 10 and when trying to sign a message I get this error: Error: Failed to build parser Caused by: EOF I used these commands: sq sign -a --secret-key-file key -o test.txt message.txt Regards Stefan -- Signal (Desktop) +4915172173279 https://keybase.io/stefan_claas

1 0

Scope of sequoia-net
by amesgen via devel 24 Feb '20

24 Feb '20

Hi, I am interested in contributing sequoia-net, specifically adding futures=0.3 support and getting keys per email address via HKP. But as sequoia-net is not published to crates.io right now, I wanted to make sure that this in in line with your plans for the project. Thanks, Alexander

2 1

How to encrypt message with ASCII key?
by Yevhenii Kurtov 10 Aug '19

10 Aug '19

Hi, In a few words I'm not even a newbie in Rust - I actually didn't wrote even a single except few exercises before, but I think time has come. I want to write a Sequoia wrapper for another language that will encrypt a message with an existing PGP key that is already present in an application as a string. A key will be received as an &str and that is where Sequoia magic has to kick in. I tried to search for how to do that and came across https://docs.sequoia-pgp.org/sequoia_guide/chapter_00/index.html#creating-a… and https://docs.sequoia-pgp.org/sequoia_guide/chapter_02/index.html#encryption First example kinda shows how to read data from an ascii text and second how to encrypt a message. Now I wonder how to combine those? :)

1 0

2024

2023

2022

2021

2020

2019

2018

Devel