From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <adrien@notk.org>
X-Original-To: caml-list@sympa.inria.fr
Delivered-To: caml-list@sympa.inria.fr
Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83])
	by sympa.inria.fr (Postfix) with ESMTPS id B1ED97F860
	for <caml-list@sympa.inria.fr>; Sat, 22 Feb 2014 14:42:51 +0100 (CET)
Received-SPF: None (mail2-smtp-roc.national.inria.fr: no sender
  authenticity information available from domain of
  adrien@notk.org) identity=pra; client-ip=91.121.71.147;
  receiver=mail2-smtp-roc.national.inria.fr;
  envelope-from="adrien@notk.org"; x-sender="adrien@notk.org";
  x-conformance=sidf_compatible
Received-SPF: Pass (mail2-smtp-roc.national.inria.fr: domain of
  adrien@notk.org designates 91.121.71.147 as permitted sender)
  identity=mailfrom; client-ip=91.121.71.147;
  receiver=mail2-smtp-roc.national.inria.fr;
  envelope-from="adrien@notk.org"; x-sender="adrien@notk.org";
  x-conformance=sidf_compatible; x-record-type="v=spf1"
Received-SPF: None (mail2-smtp-roc.national.inria.fr: no sender
  authenticity information available from domain of
  postmaster@nautica.notk.org) identity=helo;
  client-ip=91.121.71.147;
  receiver=mail2-smtp-roc.national.inria.fr;
  envelope-from="adrien@notk.org";
  x-sender="postmaster@nautica.notk.org";
  x-conformance=sidf_compatible
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ap4NAEeoCFNbeUeT/2dsb2JhbABagwZ6gxu9QQOBDBZ0gk+BCwIFEw4CEQUYiE2ZK48VoRYXgSmNWIJZNYEUBJRKBYNkAZIngy47
X-IPAS-Result: Ap4NAEeoCFNbeUeT/2dsb2JhbABagwZ6gxu9QQOBDBZ0gk+BCwIFEw4CEQUYiE2ZK48VoRYXgSmNWIJZNYEUBJRKBYNkAZIngy47
X-IronPort-AV: E=Sophos;i="4.97,523,1389740400"; 
   d="scan'208";a="59723893"
Received: from nautica.notk.org ([91.121.71.147])
  by mail2-smtp-roc.national.inria.fr with ESMTP/TLS/ADH-AES256-SHA; 22 Feb 2014 14:42:51 +0100
Received: by nautica.notk.org (Postfix, from userid 1003)
	id 45686C009; Sat, 22 Feb 2014 14:42:50 +0100 (CET)
Date: Sat, 22 Feb 2014 14:42:50 +0100
From: Adrien Nader <adrien@notk.org>
To: caml-list@inria.fr
Message-ID: <20140222134250.GA16496@notk.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: [Caml-list] Looking for GPG bindings (for package signing in yypkg)

Hi,

I want to add signatures for packages in yypkg. The approach I have in
mind is to sha3 the package files, store the signatures in the list of
packages and sign that list.

I've looked at cryptokit but as far as I can tell, using it means
staying away from PGP and its ecosystem (web of trust in particular).

Are there bindings to any GPG-capable library or something to bridge the
gap between cryptokit and gpg?

Thanks,
Adrien Nader