WIP: support for draft-ietf-openpgp-persistent-symmetric-keys #667

hko-s · 2025-11-22T16:50:11Z

This is an early implementation of draft-ietf-openpgp-persistent-symmetric-keys.

This PR branch is intended for interop testing, and should not be merged before the draft arrives in a sufficiently stable state in the OpenPGP WG!

TODO:

Introduce and use remaining *-Key traits
Cleanup
Look into password-locking PSK

src/types/params/plain_secret.rs

src/crypto/aead_key.rs

src/packet/key/symmetric.rs

dignifiedquire · 2025-12-07T18:57:06Z

src/packet/key/symmetric.rs

+ }
+}
+
+pub struct UnlockablePersistentSymmetricKey<'a> {


this concept is new, why do we need it?

My idea for that type was that it allows passing a Password into a regular encrypt and verify call like in d09cd49.

That seems like a reasonably nice way to hide away the need for a password from the rest of the code.

dignifiedquire · 2025-12-07T18:58:21Z

src/packet/key/symmetric.rs

+impl<'a> VerifyingKey for UnlockablePersistentSymmetricKey<'a> {
+ fn verify(
+ &self,
+ _hash: HashAlgorithm,


should at least check it in some form

src/types/signature.rs

hko-s marked this pull request as draft November 22, 2025 16:50

hko-s force-pushed the PSK branch 9 times, most recently from 04eca35 to 964646d Compare November 25, 2025 10:09

hko-s mentioned this pull request Nov 25, 2025

refactor!: introduce EncryptionKey trait #668

Merged

hko-s force-pushed the PSK branch 7 times, most recently from 3eeb4cd to c28dbb3 Compare November 29, 2025 20:49

dignifiedquire reviewed Nov 30, 2025

View reviewed changes

src/types/params/plain_secret.rs Show resolved Hide resolved

hko-s force-pushed the PSK branch 4 times, most recently from 491a545 to f2a0d4c Compare December 5, 2025 21:31