[Pkg-privacy-maintainers] RFS: codecrypt, the post-quantum cryptography tool

[Miroslav Kratochvil]

Hello list,

in short - I'm looking for a sponsor for this package:

http://mentors.debian.net/package/codecrypt

Codecrypt is a fairly mature software, providing some of the recent
development in post-quantum cryptography to users. Basically it's like
GnuPG, but not relying on anything that would be breakable by Shor's
algorithm, using QC-MDPC McEliece for encryption and hash-based signatures.
There is a suite of other ciphers/hash algorithms that can be used with
symmetric keys (notably XSYND implementation), SPHINCS signatures are
planned. Some of the algorithms even outperform GnuPG alternatives on
similar bit-security levels, some have surprising disadvantages, but
nothing too serious. Well, and I've been asked several times to create
debian packages.

I've already discussed the possibilities on #debian-mentors, it turns out
that the only non-standard thing on the package is that the actual package
files get built by a custom script, not by gbp buildpackage. Integration of
the development repo with gbp is problematic (gbp doesn't offer support for
extracting "make dist" tarballs as orig's and packs up a lot of unimportant
git-repo stuff) and I didn't want to create a separate repository just for
deb packaging yet; but separate repo will probably be the right way.

(the custom package-building script is here, nothing very complicated:
https://github.com/exaexa/codecrypt/blob/master/build-debian-package.sh
Main feature is the ability _not_ to put resulting files into `..'
directory -- which I found extremely annoying on standard deb tools)

Anyway, if someone here would be interested in reviewing/sponsoring the
thing, please let me know -- if there are no other problems with the
package, I'll happily try to standardize it to separate gbp repo and
maintain it.

Corresponding debian bugs are #814550 (RFS) and #814462 (ITP).

Many thanks,
-mk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-privacy-maintainers/attachments/20160304/eaa76e4a/attachment.html>