Mastodawn

Lars Wirzenius Jul 24, 2025

Any software that needs to encrypt data using OpenPGP, or to verify an OpenPGP signature on data, should use the stateless OpenPGP interface, or SOP, which is provided for a number of OpenPGP implementations. Using any other interface is going to lock in the software to that implementation.

Also, SOP is lovely to use from another program. It's designed to be nice to use from a program.

https://openpgp.foo/learn/sop/

#OpenPGP #SOP #StatelessOpenPGP

Stateless OpenPGP ("SOP")

Stateless OpenPGP (SOP) # The “Stateless OpenPGP Command Line Interface” is an evolving specification of a vendor-agnostic way to use OpenPGP. The SOP specification outlines a “generic stateless command-line interface for dealing with OpenPGP messages, certificates, and secret key material”. Many tools, based on a wide range of OpenPGP libraries, implement the SOP standard. In this text we will often use SOP tools to explore OpenPGP concepts, since they are (by design) both easy to use and easy to reason about.

OpenPGP.foo

Lars Wirzenius Mar 2, 2025

I've made release 0.3.0 of sopass, my command line password manager that uses a Stateless OpenPGP implementation for cryptography.

* configuration file
* add value from named file or stdin
* default to rsop
* manual page, built-in help

https://sopass.liw.fi/

#sopass #pass #passwordManager #commandLine #cli #openpgp #statelessOpenPGP #sop

sopass - command line password manager using SOP

Heiko Nov 27, 2024

I just released version 0.4.3 of #rsop, a stateless #OpenPGP ("SOP") CLI tool based on @rpgp:

https://crates.io/crates/rsop/0.4.3

This release fixes a bug in the 'inline-verify' command:

In versions 0.4.0 - 0.4.2, 'rsop inline-verify' erroneously printed the message body to stdout even if no valid signatures were found (except for CSF messages, which were handled correctly).

For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

#PGP #GnuPG #StatelessOpenPGP