Elektrine
Log in Register

#openpgp

8 posts · Last used 3d

Back to Timeline
lazou
Lazou @lazou@kanoa.de · 3d ago
Mein PGP-Keygenerator auf dem Weg zu Post-Quantum Ich möchte euch nur kurz informieren, dass Post-Quantum-Kryptografie in PGP nicht mehr allzu weit entfernt ist. Mit RFC 9980 wurde inzwischen der offizielle IETF-Standard für Post-Quantum-Kryptografie in OpenPGP veröffentlicht. ➡️ Verschlüsselung: hybride Verfahren mit ML-KEM + ECC ➡️ Signaturen: hybride Verfahren mit ML-DSA + EdDSA Jetzt fehlt im Wesentlichen noch die entsprechende Umsetzung in OpenPGP.js. Sobald diese Unterstützung dort sauber integriert ist, werde ich auch meinen PGP-Keygenerator um standardkonforme Post-Quantum-OpenPGP-Schlüssel erweitern. :boost_ok: #OpenPGP #PGP #Verschlüsselung #Keygenerator #Datenschutz #Security #Secunis #ITSecurity
1
1
4
martin
Martin @martin@social.mdosch.de · Jul 26, 2026
Replying to @fastfinge@fed.interfree.ca
@9yyiw179ykv56evd@fed.interfree.ca Maybe checkout #ox (#OpenPGP for #XMPP). It's not as complicated as #OMEMO. it's currently supported by #profanity, #gajim and #GoSendxmpp. #Conversations is currently working on support.
0
1
0
kuketzblog
Kuketz-Blog 🛡 @kuketzblog@social.tchncs.de · Jul 22, 2026
Gerade den Nitrokey 3A Mini gekauft. Er ersetzt künftig meinen alten Nitrokey Storage und dient mir für OpenPGP bei E-Mails, die SSH-Anmeldung per Public Key sowie die Smartcard-Anmeldung unter Linux. Den verschlüsselten Massenspeicher brauche ich nicht mehr - dafür ist der neue Nitrokey deutlich kleiner und kann dauerhaft am Notebook bleiben. #Nitrokey #OpenPGP #SSH #Linux
0
2
0
hko
Heiko @hko@floss.social · Jul 19, 2026
Over the last half week, I've implemented very barebones #OpenPGP card support in @minipgp6@floss.social Support is limited to Ed25519 and X25519 (since that's the intersection of what minipgp supports and what current cards support). As expected, there is no fundamental obstacle that prevents use of existing OpenPGP card devices with v6 keys. #rfc9580
8
1
5
virebent
Virebent @virebent@infosec.exchange · Jul 09, 2026

A public project should not be credible only because it appears online.

This is why I am using ProofBundle for the projects I publish and discuss publicly, including the ones I present here on LinkedIn.

ProofBundle creates a portable cryptographic proof for a project snapshot.

It takes the files, builds a deterministic SHA-256 manifest, reduces the entries into a Merkle tree, and produces one Merkle root for the whole project state.

Then that root is bound to a signed author/custody claim.

ProofBundle can also use OpenTimestamps: the Merkle root and manifest hash are timestamped and anchored to public blockchains, without uploading the original project and without putting the contents on-chain.

So the proof has three layers:

  • integrity: SHA-256 hashes, manifest, and Merkle root
  • identity/custody: Ed25519 or OpenPGP signature
  • time evidence: OpenTimestamps blockchain anchoring

For signing, ProofBundle supports a default Ed25519 mode: modern, compact, and easy to verify.

It can also use a detached OpenPGP signature, including OpenPGP keys based on Ed25519. And for stronger key custody, OpenPGP signing can optionally be backed by a YubiKey, so the private signing key stays hardware-backed and non-exportable.

This is not copyright registration and it is not a legal shortcut.

It is technical evidence that:

  • this exact project state existed
  • these files matched this manifest
  • this Merkle root represented the snapshot
  • this key signed the claim
  • the timestamp evidence was

anchored through OpenTimestamps

  • the proof can be verified independently

Full technical note: https://www.gabrielesalati.eu/blog/proofbundle-verifiable-project-integrity.html

#ProofBundle #OpenTimestamps #Blockchain #OpenPGP #Ed25519 #MerkleTree #YubiKey #CyberSecurity #SoftwareEngineering #OpenSource

0
0
0
delta
Delta Chat @delta@chaos.social · May 05, 2026
Congrats to @protonprivacy@mastodon.social for beating us on introducing Post-Quantum Cryptography into mail messaging! No worries. We'll implement https://autocrypt2.org which additionally offers reliable deletion / forward secrecy during 2026 :) We are working with Proton cryptographers on OpenPGP specifications, and they are now moving towards using @rpgp@mastodon.social , the end-to-end encryption we are using. Everything will be based on RFC9580 (#OpenPGP v6) ... the eocsystem is moving :) https://proton.me/blog/introducing-post-quantum-encryption
169
17
120

You've seen all posts