Join Nostr
2026-05-30 13:57:34 UTC

Jonah Aragon :MN: on Nostr: RE: I hate pretty drama in most/all open source communities so much ...

RE: https://floss.social/@hko/116459621169318785

I hate pretty drama in most/all open source communities so much
Regular PSA reminder:

While GnuPG 2.5.x implements hybrid PQC encryption based on ML-KEM, just like https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/, GnuPG's implementation is entirely incompatible with the IETF-specified format, which all other libraries are implementing.
Both serialization and the KEM combiners differ.

The bottom line is that anyone who wants to use vendor-agnostic PQC with OpenPGP should *avoid GnuPG's PQC key formats*.

This is all exceedingly unfortunate and weird, and frankly, a total disgrace.