Proton
An image of Proton Mail's open source encryption libraries.

As part of our mission to make security, privacy, and freedom accessible to all, we maintain two open source cryptography libraries that make it easier for developers to apply strong encryption in their projects. We have been the maintainers of OpenPGP.js since 2016 and GopenPGP since 2019, meaning we are responsible for ensuring these repositories are up-to-date, secure, and accessible.

It is also important that these encryption systems are interoperable — i.e., that they can interact with other cryptographic libraries. The more interoperable libraries are, the more widely they can be used.

That’s why today we’re pleased to announce that we integrated our cryptography libraries into the OpenPGP interoperability test suite(nuova finestra). This suite, maintained by the Sequoia PGP(nuova finestra) team, makes it easier and faster to run compatibility tests between different open source encryption libraries and share the results of those tests. Developers can use this suite to ensure their encrypted apps are compatible with encrypted services that use different implementations of OpenPGP.

Improved testing with other OpenPGP implementations

This portion is rather technical; however, the important thing to take away is that our encryption team added a specific interface that is shared between different types of OpenPGP software. Even if these other OpenPGP implementations are written in different programming languages, this shared command-line interface lets developers test them together.

To integrate our libraries into the test suite, we implemented the Stateless OpenPGP (“sop”) command line interface(nuova finestra) for OpenPGP.js(nuova finestra) (sop-openpgp-js(nuova finestra), expanding on the work by Sequoia) and GopenPGP(nuova finestra) (gosop(nuova finestra)). We released both implementations under open source licenses.

The standardized “sop” interface provides a common ground for testing the compatibility between OpenPGP implementations written in several languages, such as Rust, Python, and C++. The results of these tests(nuova finestra) show that there is good interoperability between OpenPGP.js, GopenPGP, and the other tested libraries, with widespread support for strong cipher suites, elliptic-curve cryptography, and authenticated ciphers. This analysis exposed a few minor interoperability bugs as well, which we have since fixed.

Why Proton loves open source

We are big advocates for open source. As physicists and scientists, we appreciate that open source forces you to “show your work.” That is why we made all user-facing Proton apps, both for Proton Mail(nuova finestra) and Proton VPN(nuova finestra), open source and have published all the results of third-party security audits. By taking these steps, any security researcher can verify our code.

We also believe in decentralization and open collaboration, which open source fosters. We have even worked with members of the Proton community on our Linux command line tool for Proton VPN(nuova finestra)

Adding our libraries to the interoperability test suite is a great initiative to drive the OpenPGP protocol forward. It is now even easier for other privacy-focused software and app developers to incorporate strong encryption into their projects. The more apps that are encrypted, the more private data will be protected.

You can get a free secure email account from Proton Mail here.

We also provide a free VPN service(nuova finestra) to protect your privacy. Proton Mail and Proton VPN are funded by community contributions. If you would like to support our development efforts, you can upgrade to a paid plan. Thank you for your support.


Feel free to share your feedback and questions with us via our official social media channels on Twitter(nuova finestra) and Reddit(nuova finestra).

Articoli correlati

Proton Drive for Windows new update with the Optimize Storage feature
en
We've added a new Optimize Storage feature in Proton Drive for Windows to manage synced folders easily. See more updates you may have missed.
en
  • Aggiornamenti dei prodotti
  • Proton Drive
Rebuilt from the ground up, the new Proton Drive for macOS app offers enhanced performance, improved reliability, and a refreshed design
The Earth, a recycling symbol, and a warning sign representing a reminder to back up data on World Backup Day
en
Celebrate World Backup Day by learning from data loss stories, from family heirlooms to $500,000 in Bitcoin, and how to avoid a similar fate.
A desktop computer showing cleanup supplies and Proton apps for digital cleaning
en
  • Guide sulla privacy
Take control of your digital life by spring cleaning your inbox, passwords, and cloud storage using Proton's suite of privacy-first tools.
What is ePHI? The difference between PHI and ePHI explained
en
What is the difference between ePHI and PHI, and how can healthcare data can optimally be kept safe as it’s passed from one party to another?
A vial, Erlenmeyer flask, and a DNA double-helix being deleted.
en
If you used 23andMe, your data could soon be for sale. Here's how to delete your data from 23andMe — and why you might want to do so sooner than later.