Sequoia PGP 1.0

Sequoia PGP, tj. implementace OpenPGP v programovacím jazyce Rust, dospěla po třech a půl letech vývoje do verze 1.0. Zdrojové kódy jsou k dispozici na GitLabu pod licencí GPLv2.

18.12.2020 13:33 | Ladislav Hagara | Nová verze

Komentáře

[JiK]

v cem je to jine/lepsi nez original?

[IN RUST WE TRUST]

Je to přeci napsané v Rustu to nestačí?

[Marián Kyral]

Ne.

[Ján Dráb]

In 2018, three former GnuPG developers(Neal H. Walfield, Justus Winter,Kai Michaelis) began work on Sequoia, a new implementation of OpenPGP in Rust. The project's founders believe that there is much to be desired in GnuPG, which is the de facto standard implementation of OpenPGP today. They hope to fix this with a reimplementation of the specification using a language with features that will help protect users from common types of memory bugs. Walfield discussed their motivations for the new project. In his opinion, GnuPG is "hard to modify" — mostly due to its organic growth over the decades. He pointed out the tight coupling between components in GnuPG and the lack of unit testing as specific problem areas. As an example, he noted that the GnuPG command-line tool and the corresponding application libraries do not have the same abilities; there are things that can only be done using the command-line tool. Because it is written in Rust, Sequoia benefits from all of the memory-safety advantages that the language provides. The repository shows significant efforts are being made to write unit tests to prevent regressions and improve quality. Unlike GnuPG, where the command-line gpg tool is more powerful than the library, Sequoia is an OpenPGP library first; all of its functionality is available via the exposed APIs.

ja myslím, ze to bude lepšie :)