Looking for GnuPG-compatible library for server application

Bernd R. Fix bernd at wauland.de
Fri Oct 19 19:49:39 CEST 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

In a server application that is developed for one of the projects we are
funding, the code currently uses a GnuPG wrapper (not GPGME but
something similar) to perform key generation and encrytion/decryption of
messages within the application.

Although this approach works technically, the project team is not
satisfied with the runtime behaviour of the crypto operations that take
longer then necessary due to the fact that new instances of GnuPG have
to be created for every operation.

We are therefore looking for a library that provides GnuPG (OpenPGP)
functionality and that can be used in a server application (Python/C) -
but we can't find anything suitabe for our requirements:

* C/C++ based OpenPGP functions (callable from Python)
* support for ECC (as defined in RFC 6637)
* full support of GnuPG functionality, especially anonymous
  multi-recipient messages
* abstract keyring and trustdb handling (database persistence preferred
  as the current number of private keys is some 20'000 keys)

Is there any plan to create such a library within the GnuPG project (as
such a library could also be an abstraction layer between libgcrypt and
the GnuPG executables)?

Are any GnuPG developers willing to code such a library? The project has
financial resources to aid the development within reasonable bounds if
necessary.

Thanks for your attention,
Bernd

P.S.: If such a library already exists and has just slipped our
attention, please provide any pointer/link to it.    >Y<
- -- 

Wau-Holland-Stiftung                   W
Postfach 65 04 43              H O L L A N D
22364 Hamburg/Germany        S T I F T U N G
http://www.wauland.de

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBCAAGBQJQgZKrAAoJEN1A8liqzgHpWU8H/2xtqL/Ctinw9sWlXD0xq2K7
DldyVHzva4QiFbjWd9Lg5SoNejUqjAUuUkg+Gbc5L9M7tTOnW5e3I6JxeetTAlDf
7W0Uva0HbQE34Yv/PAZjfuk+anM2M+SvPe51F3DXJs6C6EOVZDKFI30VLe8FvCHQ
mehX8P/PlcMlVB1zMUbTHD5qw8/7UaB1TbPKOuBXiSBFKeeJBY08rQZk8Hb5GIL8
W53MfWGfjajafg/T+TQBfMdVse3yMSRaBqVMqg7WBlt3tXXL+qB8wNmtJYwDnsol
tyui0St9yNPZAtTHlpoGQJUvq6/DWgHlAFtpAPolOzQ9qAzQnb0l4UXZAKgsjCA=
=pdYi
-----END PGP SIGNATURE-----



More information about the Gnupg-devel mailing list