Stripped down (minimalistic) gpg?

David Shaw dshaw@jabberwocky.com
Mon Mar 3 20:28:02 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, Mar 03, 2003 at 12:17:39PM -0600, Adi Linden wrote:
> Hi,
> 
> Just wondering how I could build a small, minimalistic gpg binary. I need 
> a small statically build gpg binary to run on a webserver. All it'll ever 
> do is encrypt data using public keys. Don't need keyserver support or 
> anything else fancy.
> 
> Anyone done that before that would share their experiences?

When you build GnuPG, use ./configure --disable-exec --disable-dynload

That will leave out some extra stuff you don't need like the keyserver
support, photo ID support, and the ability to dynamically load the
IDEA cipher.

The development GnuPG allows you to also use --disable-xxxxx to leave
out individual algorithms, and --enable-minimal to make the smallest
gpg possible.  The minimal GnuPG has only DSA, Elgamal, RSA, MD5,
3DES, SHA-1, RMD160, ZIP and ZLIB.

David
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2rc1 (GNU/Linux)
Comment: http://www.jabberwocky.com/david/keys.asc

iD8DBQE+Y6zu4mZch0nhy8kRAvDMAJ9EqWtHB8PvI3tOIEzBOxKe9CwK+QCff83T
3vY6rwv4nmq6ha6ztWcasYw=
=TRfA
-----END PGP SIGNATURE-----