Using libgcrypt on large files
Werner Koch
wk at gnupg.org
Thu Feb 24 14:22:44 CET 2005
On Wed, 23 Feb 2005 22:41:20 +0100, Ralf H said:
> I am thinking about using libgcrypt to sign files, which I will deploy
> during an update phase to customers. With the signature I want to check
> the integrity (of course :)).
Don't do this at all! Use an established protocol to sign stuff and
nothing homegrown. Getting this all right is not easy in particular
if you don't have any experience in this field. Libgcrypt merely
provides the building blocksto implement such a protocol (OpenPGP,
CMS).
If you need a library, have a look at GPGME.
Salam-Shalom,
Werner
More information about the Gcrypt-devel
mailing list