Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Replace golang.org/x/crypto/openpgp with github.com/ProtonMail/go-crypto #942

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Replace golang.org/x/crypto/openpgp with github.com/ProtonMail/go-crypto #942

wants to merge 1 commit into from

Commits on Dec 9, 2022

  1. Replace golang.org/x/crypto/openpgp with github.com/ProtonMail/go-crypto 

    The golang.org/x/crypto/openpgp library has been deprecated for over a
year now (see golang.org/issue/44226, and the deprecation notice in the
package documentation). The library is unmaintained and has a number of
API and usability issues. ProtonMail maintains a community fork which
is actively maintained, and for most cases is a drop-in replacement.

This change switches usages of golang.org/x/crypto/openpgp/... with
github.com/ProtonMail/go-crypto/openpgp/..., the only other code changes
are adding a nil packet.Config to a openpgp.CheckArmoredDetachedSignature
call.

(This change is part of a wider effort by the Go Security team to remove
usages of golang.org/x/crypto/openpgp from the Go ecosystem.)
    @rolandshoemaker
    rolandshoemaker committed Dec 9, 2022
    Configuration menu
    Copy the full SHA
    e65b1c1 View commit details
    Browse the repository at this point in the history