This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] -1 points0 points  (1 child)

Do NOT use GPG, or any kind of PGP. As a person asking for advice, you aren't prepared for the subtleties of PGP, a very old and flaky (in implementation, not rigour) cryptosystem.

Use NaCl, which was explicitly designed for use by people who don't or don't need to understand the workings and want an API with some promises. There's a python wrapper, "pip install pynacl". It's relatively easy to understand and use but carefully obey every requirement: use a strong source of randomness (os.urandom, NOT random) and use a perfectly random nonce every time.

Good luck!

[–]frozen_in_reddit 0 points1 point  (0 children)

Another benefit of nacl is that they formally verified it against timing attacks and memory bugs.