Hacker News new | ask | show | jobs
by throwawaymath 2585 days ago
I’m not sure I understand why Protonmail forked the Go crypto library here. Did they fork the entire thing and make substantial changes/updates throughout, or did they just make changes to the PGP implementation available in Go/crypto?

Go/crypto already implements elliptic curve cryptography[1], so I’m curious which specific elliptic curve primitives (or algorithms) they added to their fork.

________

1. https://golang.org/pkg/crypto/
2 comments
w8rbt 2585 days ago
Go wanted to deprecate OpenPGP support. But, it looks as if they have walked that back a lot:

https://github.com/golang/go/issues/30141

"We will be deprecating the packages listed above, except openpgp/, otr/ and xts/.

I'll update the proposal and send a CL shortly."

link
tgragnato 2585 days ago
https://github.com/ProtonMail/crypto/issues/21

https://github.com/golang/crypto/compare/master...ProtonMail...

They changed defaults. 570d0c5fa7ef500786f15958b39af43af3359719 is interesting: "Add secp256k1 / x25519 / brainpool curves to openpgp".

link