[Rpm-maint] [rpm-software-management/rpm] Eliminate the internal OpenPGP parser (Issue #1935)

[Michael Schroeder]

My reasoning is this: the external library has a need to verify the self-sigs in the keys. Thus, it needs to do the hashing of the key material and run the pubkey algorithm.

I don't think you'll find a library that offers callbacks for this, so it will probably link against some of the standard crypto backend libs.

I guess is that it makes no sense to have another digesting layer in rpm when the pgp lib already provides this functionality. (The crypto backend needs to be identical anyway for consistency/certification reasons.)

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1935#issuecomment-1050698379
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/1935/1050698379 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20220225/32a4d18a/attachment-0001.html>