Using libgcrypt on large files

Werner Koch wk at gnupg.org
Thu Feb 24 14:22:44 CET 2005


On Wed, 23 Feb 2005 22:41:20 +0100, Ralf H said:

> I am thinking about using libgcrypt to sign files, which I will deploy
> during an update phase to customers. With the signature I want to check
> the integrity (of course :)).

Don't do this at all!  Use an established protocol to sign stuff and
nothing homegrown.  Getting this all right is not easy in particular
if you don't have any experience in this field.  Libgcrypt merely
provides the building blocksto implement such a protocol (OpenPGP,
CMS).

If you need a library, have a look at GPGME.


Salam-Shalom,

   Werner




More information about the Gcrypt-devel mailing list