David Leon Gil

Build: Split out End-to-End crypto library from extension

3

There's no pure-JS OpenPGP (or crypto) library of similar quality. The crypto really merits its own project, especially as many Node.js people are using rather poorly written alternatives. See yahoo/end-to-end#32...

There's no pure-JS OpenPGP (or crypto) library of similar quality. The crypto really merits its own project, especially as many Node.js people are using rather poorly written alternatives. See google/end-to-end#244...

Support for outdated, weak, and dangerous parts of OpenPGP

1

The items to be deprecated have been reviewed and approved by our "consulting cryptographers," [Payman Mohassel](http://pages.cpsc.ucalgary.ca/~pmohasse/) and [Juan Garay](http://labs.yahoo.com/author/garay/) of Yahoo Labs. ## Support removed **Tag 9 packets.** Yahoo and...

@struct: Do we have boilerplate?

At the moment, neither P-384 nor P-521 have constant-time implementations in Go. Because signature private keys are used repeatedly, it is unsafe to use either of these curves (unfortunately w.r.t....