Heiko Schaefer

Support for Sequoia as a backend in rpm is coming: https://lists.fedoraproject.org/archives/list/[email protected]/thread/WCIIV7HGXW5Y7QCPKW6D3TILPOBFTCSS/

> AFAIK ECDH decryption requires data that's in user certificate, like KDF (so it cannot operate in principle without user's certificate/public key). I believe @hko-s had some heuristics that try...

> @jans23 last time i checked, sequoia was not supporting smartcard? I've written a set of OpenPGP card client libraries in Rust (https://gitlab.com/openpgp-card/openpgp-card), which will over time be more integrated...

I've spent a bit of time with https://crates.io/crates/sop, and the "OpenPGP interoperability test suite", both of which are excellent! The result of my hacking so far is the experimental and...

I have implemented a CSF hack [here](https://codeberg.org/heiko/rpgpie/src/branch/main/src/msg/csf.rs), and would like to upstream the functionality soon (of course in rpgp the parsing should be done with nom, I'll adjust the implementation...

Great, I also had a (weak) preference for that approach. I'll propose a PR in that direction, soonish.

> @hko-s I failed to come up with a good solution for this in the past, any thoughts on how to handle this best? I'd imagine a function on `Signature`...

(Ah, but I guess that's only part of what's needed - I'm tempted to hand-wave, and say that the big-picture operation should be addressed in a higher layer :))

The above comment is regarding "Third-party signatures on User IDs" (signature types 0x10-0x13, see https://www.rfc-editor.org/rfc/rfc4880.html#section-5.2.1). There are also third-party signatures directly on the primary key (signature type 0x1F). Frankly, I'm...

> One tricky bit is that for PGP signing a couple of things from the PGP "public key" (certificate) are needed, e.g. signing key ID, for embedded that in subpackets...