Re: NaCl support for Emacs

[Richard Riley]

Ted Zlatanov <address@hidden> writes:

> On Mon, 09 Jan 2012 20:30:48 -0500 Stefan Monnier <address@hidden> wrote: 
>
>>>>> Many places in the Emacs core (C and ELisp) could use a fast easy
>>>>> encryption library for arbitrary data that supports public and
>>>>> secret-key encryption, in addition to EPA/EPG that
>>>>> I already mentioned.
> SM> Could be.  There's no hard evidence for it yet.
>>> I listed three places I think could use it, how much harder does the
>>> evidence have to be?
>>> - auth-source's cache of file contents
>>> - EPA/EPG or something like it that does not rely on the external GPG 
>>> utility
>>> - general ELisp storage of secret data
>
> SM> I don't think Emacs should reinvent every wheel.  GPG does this job well
> SM> and using it means that those files can be decrypted without Emacs.
>
> Calling out to an external process is less secure than using built-in
> encryption primitives.  So while in general you're right, in this case
> I'll respectfully disagree.  It may be convenient but it's not secure.

probably naive Q but : this library encrypts/decrypts identically to the
external gpg? e.g a file I encrypt with gpg can be read using this new
proposal and vice versa?