search

neuhalje / bouncy-gpg

Make using Bouncy Castle with OpenPGP fun again!
https://neuhalje.github.io/bouncy-gpg/
Other
205 stars 58 forks source link

Recommendation: Implement SOP interface to benefit from test.sequoia-pgp.org #63

Open vanitasvitae opened 3 years ago

vanitasvitae commented 3 years ago

The folks over at sequoia-pgp.org are doing a great job of improving the OpenPGP ecosystem. What helped me a lot to gain a deeper understanding of OpenPGP signatures and verification was to implement the Stateless OpenPGP Command Line Interface which allows to plug an implementation into the sequoia interoperability test suite which uncovered a ton of things I missed.

The SOP specification describes a minimal command-line application which can be used to test different implementations against each other and against certain test cases. The suite goes into great detail and contains lots of checks that otherwise easily slip the radar.

I can highly recommend implementing the interface to improve bouncy-gpg.

vanitasvitae commented 2 years ago

FYI: There is now sop-java which you might consider creating an implementation for. That way you can benfit from sop-java-picocli providing you a CLI front-end for free 😉