Skip to content
This repository has been archived by the owner on Oct 15, 2024. It is now read-only.

crypto plugin: gpgme plugin variant #896

Closed
petermax2 opened this issue Aug 30, 2016 · 5 comments
Closed

crypto plugin: gpgme plugin variant #896

petermax2 opened this issue Aug 30, 2016 · 5 comments

Comments

@petermax2
Copy link
Member

petermax2 commented Aug 30, 2016

Feature

The gpgme plugin is created to solely uses the gpgme library for crypto operations.

@petermax2 petermax2 self-assigned this Aug 30, 2016
@petermax2
Copy link
Member Author

This is a follow-up task to #892 .

@petermax2
Copy link
Member Author

We have two options here:

  1. We use the master password and call the gpg binary to perform symmetric encryption with the regular master password.
  2. We do not generate and use a master password for crypto_gpg but instead we call the "default" --encrypt / --decrypt option of gpg.

I would prefer number 1 because of better comparability to the other compilation variants. However, number 2 might be cleaner and more secure (no passwords are written over the pipes).

@markus2330 What is your opinion on this matter?

@markus2330
Copy link
Contributor

You are right that a plugin variant crypto_gpg doing something completely different than the other variants would be strange. Do you really need yet another comparison? 3 variants should be enough? I do not think that we need a benchmark to show us that executing processes takes longer than library calls. Describing a full setup (case study) with getenv would be much more interesting!

What about having a separate plugin gpg that uses --encrypt and --decrypt or even --sign?

@petermax2
Copy link
Member Author

I do not think that we need a benchmark to show us that executing processes takes longer than library calls.

Agreed.

What about having a separate plugin gpg that uses --encrypt and --decrypt or even --sign?

I was thinking about separate plugins for encryption/decryption and signing. Like having sign_gcrypt, fsign (or fverify, not sure about the name yet). I would prefer to implement the signature operations outside the scope of my Bachelor's Thesis.

@petermax2 petermax2 changed the title crypto plugin: gpg plugin variant crypto plugin: gpgme plugin variant Jun 19, 2018
@petermax2
Copy link
Member Author

Short update

I am making progress with libgpgme. So far I have a prototype with working encryption and decryption. The code needs some polishing but other than that it's looking good.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants