Skip to content

WIP Fix handling PQC Signatures#2238

Draft
gerrod3 wants to merge 1 commit intopulp:mainfrom
gerrod3:pqc-sig
Draft

WIP Fix handling PQC Signatures#2238
gerrod3 wants to merge 1 commit intopulp:mainfrom
gerrod3:pqc-sig

Conversation

@gerrod3
Copy link
Contributor

@gerrod3 gerrod3 commented Mar 5, 2026

fixes: #2237
Generated-by: claude-opus-4.6

📜 Checklist

  • Commits are cleanly separated with meaningful messages (simple features and bug fixes should be squashed to one commit)
  • A changelog entry or entries has been added for any significant changes
  • Follows the Pulp policy on AI Usage
  • (For new features) - User documentation and test coverage has been added

See: Pull Request Walkthrough

fixes: pulp#2237
Generated-by: claude-opus-4.6
@github-actions github-actions bot added the wip label Mar 5, 2026
return result


def _extract_inline_sig_data(signature_raw):
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To be honest I consider this near-unreviewable, I'm not thrilled with the implementation we already have in Pulpcore but I would especially rather not proliferate PGP parsing code out to plugins.

I'd like to investigate whether we can replace both with pysequoia. Sequoia (the base library, at least) is maintained and is "blessed" by RH since new versions of RPM use it. It's guaranteed to support PQC and AFAIK is planned to be the basis for replacing GPG given the ecosystem bifurcation.

Copy link
Contributor

@dralley dralley Mar 5, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

https://github.com/wiktor-k/pysequoia?tab=readme-ov-file#parsing

For the lowest level stuff it may not be possible yet w/ pysequoia but it would not necessarily be that hard to get there, see: wiktor-k/pysequoia#32

The functionality already exists in sequoia, just maybe not exposed. It's also possible that some of that has been added since we last checked.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I agree about using pysequoia and I even asked claude to use it in my prompt. Then it thought about it for 2 seconds and decided "nah, let me hand write it". 🤡

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support Post-Quantum Cryptography

2 participants