[guardian-dev] Gibberbot keystore format

[Miron]

On 14/08/12 21:24, Miron wrote:
> On 14/08/12 12:59, Hans-Christoph Steiner wrote:
> ...
>
> > Then we'd just need to figure out how the import/export process
> > actually works, mostly in terms of how to securely copy the files
> > around.
>
> I was thinking of piping directly into APG for export (APG will let
> you email it).  We can also register a specific extension so that on
> decryption APG automatically routes it to Gibberbot.  I have to check
> if this is all done securely - i.e. that APG does not store plaintext
> on flash.

To clarify, the purpose of going through APG (or your GPG JNI effort) is
to ensure that encryption/decryption happens in memory and never touches
the flash.  It has nothing to do with PSST (although PSST might end up
with a similar RAM based flow for constructing / unpacking subkeys).

>
>
> > .hc
>