What do LLMs mean for GnuPG?

Jacob Bachmeyer jcb62281 at gmail.com
Tue Mar 31 05:45:30 CEST 2026


On 3/30/26 08:27, Hakun_the_eril via Gnupg-users wrote:
> I agree that actual code for ciphers must be 100% written by humans, 
> and reviewed by humans,-  but for everything else it can be a OK tool.

No, no, no, no, and NO!

Anything in the same process space where private or symmetric keys are 
handled is no less sensitive than the cipher implementation itself.

Yes, this means lots of programs have really bad architectures for 
handling cipher keys.


-- Jacob




More information about the Gnupg-users mailing list