From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Richard Riley Newsgroups: gmane.emacs.devel Subject: Re: NaCl support for Emacs Date: Tue, 10 Jan 2012 02:54:48 +0100 Organization: aich tea tea pea dicky riley dot net Message-ID: References: <87ehve3ul8.fsf@lifelogs.com> <87lipl22xm.fsf@lifelogs.com> <87boqh20ha.fsf@lifelogs.com> <871urc46c9.fsf@uwakimon.sk.tsukuba.ac.jp> <739bsoysp.fsf@news.eternal-september.org> <87ty47r5yt.fsf@lifelogs.com> <87k452p5u3.fsf@lifelogs.com> <87liphne9e.fsf_-_@lifelogs.com> <87fwfon7gl.fsf@lifelogs.com> <87hb04icxl.fsf@lifelogs.com> <87pqesgwnj.fsf@lifelogs.com> Reply-To: emacs-devel@gnu.org NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1326160515 28115 80.91.229.12 (10 Jan 2012 01:55:15 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Tue, 10 Jan 2012 01:55:15 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Jan 10 02:55:12 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1RkQve-00042F-5d for ged-emacs-devel@m.gmane.org; Tue, 10 Jan 2012 02:55:10 +0100 Original-Received: from localhost ([::1]:35492 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RkQvd-00014q-Iy for ged-emacs-devel@m.gmane.org; Mon, 09 Jan 2012 20:55:09 -0500 Original-Received: from eggs.gnu.org ([140.186.70.92]:41694) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RkQvb-00012L-2M for emacs-devel@gnu.org; Mon, 09 Jan 2012 20:55:08 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1RkQvX-0008Mw-E8 for emacs-devel@gnu.org; Mon, 09 Jan 2012 20:55:06 -0500 Original-Received: from lo.gmane.org ([80.91.229.12]:58708) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RkQvW-0008M4-W6 for emacs-devel@gnu.org; Mon, 09 Jan 2012 20:55:03 -0500 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1RkQvV-0003xR-E3 for emacs-devel@gnu.org; Tue, 10 Jan 2012 02:55:01 +0100 Original-Received: from 85.183.18.158 ([85.183.18.158]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 10 Jan 2012 02:55:01 +0100 Original-Received: from rileyrg by 85.183.18.158 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 10 Jan 2012 02:55:01 +0100 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: emacs-devel@gnu.org Original-Lines: 28 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: 85.183.18.158 Mail-Copies-To: never User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.0.92 (gnu/linux) Cancel-Lock: sha1:3eTajfEpYbA9qDfb4+mpky2FMaU= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 80.91.229.12 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:147541 Archived-At: Ted Zlatanov writes: > On Mon, 09 Jan 2012 20:30:48 -0500 Stefan Monnier wrote: > >>>>> Many places in the Emacs core (C and ELisp) could use a fast easy >>>>> encryption library for arbitrary data that supports public and >>>>> secret-key encryption, in addition to EPA/EPG that >>>>> I already mentioned. > SM> Could be. There's no hard evidence for it yet. >>> I listed three places I think could use it, how much harder does the >>> evidence have to be? >>> - auth-source's cache of file contents >>> - EPA/EPG or something like it that does not rely on the external GPG utility >>> - general ELisp storage of secret data > > SM> I don't think Emacs should reinvent every wheel. GPG does this job well > SM> and using it means that those files can be decrypted without Emacs. > > Calling out to an external process is less secure than using built-in > encryption primitives. So while in general you're right, in this case > I'll respectfully disagree. It may be convenient but it's not secure. probably naive Q but : this library encrypts/decrypts identically to the external gpg? e.g a file I encrypt with gpg can be read using this new proposal and vice versa?