Signing events

[John Swinbank]

I hate to follow-up to myself, but…

On 5 Mar 2012, at 11:31, John Swinbank wrote:

> Of course, there's nothing wrong with GPG, but I think it's fairly clear that it will never be available as a shared library that can be directly linked into VOEvent handling code. Is there a (free, reliable) "libOpenPGP" that we could use instead? That would certainly go a long way towards addressing my concerns. (As I understand it, GPGME provides a high level API as a shared library, but still ultimately forks GPG behind the scenes. I'm happy to be corrected on this, though.)

Libgcrypt <http://directory.fsf.org/wiki/Libgcrypt> might do the trick. Alternatively, I'm not sure how straightforward it would be to put together a GPG/OpenPGP compliant system based on other libraries: for example, the Python programmer in me wonders whether I could do it using PyCrypto <https://www.dlitz.net/software/pycrypto/>.

Cheers,

John