Skip to content

Commit 4263eb5

Browse files
authored
Replace deprecated openpgp library (#839)
* replace deprecated openpgp lib (golang/go#44226) * update license
1 parent b8c59a7 commit 4263eb5

36 files changed

+1815
-24
lines changed

Diff for: .licensed.yml

+33
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,39 @@ reviewed:
1010
- golang.org/x/net/html
1111
- golang.org/x/net/html/atom
1212
- golang.org/x/crypto/curve25519
13+
- github.com/ProtonMail/go-crypto/bitcurves
14+
- github.com/ProtonMail/go-crypto/brainpool
15+
- github.com/ProtonMail/go-crypto/eax
16+
- github.com/ProtonMail/go-crypto/internal/byteutil
17+
- github.com/ProtonMail/go-crypto/ocb
18+
- github.com/ProtonMail/go-crypto/openpgp
19+
- github.com/ProtonMail/go-crypto/openpgp/aes/keywrap
20+
- github.com/ProtonMail/go-crypto/openpgp/armor
21+
- github.com/ProtonMail/go-crypto/openpgp/ecdh
22+
- github.com/ProtonMail/go-crypto/openpgp/ecdsa
23+
- github.com/ProtonMail/go-crypto/openpgp/eddsa
24+
- github.com/ProtonMail/go-crypto/openpgp/elgamal
25+
- github.com/ProtonMail/go-crypto/openpgp/errors
26+
- github.com/ProtonMail/go-crypto/openpgp/internal/algorithm
27+
- github.com/ProtonMail/go-crypto/openpgp/internal/ecc
28+
- github.com/ProtonMail/go-crypto/openpgp/internal/encoding
29+
- github.com/ProtonMail/go-crypto/openpgp/packet
30+
- github.com/ProtonMail/go-crypto/openpgp/s2k
31+
- github.com/cloudflare/circl/dh/x25519
32+
- github.com/cloudflare/circl/dh/x448
33+
- github.com/cloudflare/circl/ecc/goldilocks
34+
- github.com/cloudflare/circl/internal/conv
35+
- github.com/cloudflare/circl/internal/sha3
36+
- github.com/cloudflare/circl/math
37+
- github.com/cloudflare/circl/math/fp25519
38+
- github.com/cloudflare/circl/math/fp448
39+
- github.com/cloudflare/circl/math/mlsbset
40+
- github.com/cloudflare/circl/sign
41+
- github.com/cloudflare/circl/sign/ed25519
42+
- github.com/cloudflare/circl/sign/ed448
43+
- golang.org/x/crypto/argon2
44+
- golang.org/x/crypto/blake2b
45+
- golang.org/x/crypto/sha3
1346

1447
# Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/check-dependencies/AGPL-3.0/.licensed.yml
1548
allowed:
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
---
2+
name: github.com/ProtonMail/go-crypto/bitcurves
3+
version: v0.0.0-20230923063757-afb1ddc0824c
4+
type: go
5+
summary:
6+
homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/bitcurves
7+
license: other
8+
licenses:
9+
- sources: [email protected]/LICENSE
10+
text: |
11+
Copyright (c) 2009 The Go Authors. All rights reserved.
12+
13+
Redistribution and use in source and binary forms, with or without
14+
modification, are permitted provided that the following conditions are
15+
met:
16+
17+
* Redistributions of source code must retain the above copyright
18+
notice, this list of conditions and the following disclaimer.
19+
* Redistributions in binary form must reproduce the above
20+
copyright notice, this list of conditions and the following disclaimer
21+
in the documentation and/or other materials provided with the
22+
distribution.
23+
* Neither the name of Google Inc. nor the names of its
24+
contributors may be used to endorse or promote products derived from
25+
this software without specific prior written permission.
26+
27+
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
28+
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
29+
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
30+
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
31+
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
32+
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
33+
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
34+
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
35+
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
36+
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
37+
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
38+
- sources: [email protected]/PATENTS
39+
text: |
40+
Additional IP Rights Grant (Patents)
41+
42+
"This implementation" means the copyrightable works distributed by
43+
Google as part of the Go project.
44+
45+
Google hereby grants to You a perpetual, worldwide, non-exclusive,
46+
no-charge, royalty-free, irrevocable (except as stated in this section)
47+
patent license to make, have made, use, offer to sell, sell, import,
48+
transfer and otherwise run, modify and propagate the contents of this
49+
implementation of Go, where such license applies only to those patent
50+
claims, both currently owned or controlled by Google and acquired in
51+
the future, licensable by Google that are necessarily infringed by this
52+
implementation of Go. This grant does not include claims that would be
53+
infringed only as a consequence of further modification of this
54+
implementation. If you or your agent or exclusive licensee institute or
55+
order or agree to the institution of patent litigation against any
56+
entity (including a cross-claim or counterclaim in a lawsuit) alleging
57+
that this implementation of Go or any code incorporated within this
58+
implementation of Go constitutes direct or contributory patent
59+
infringement, or inducement of patent infringement, then any patent
60+
rights granted to you under this License for this implementation of Go
61+
shall terminate as of the date such litigation is filed.
62+
notices: []
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
---
2+
name: github.com/ProtonMail/go-crypto/brainpool
3+
version: v0.0.0-20230923063757-afb1ddc0824c
4+
type: go
5+
summary: Package brainpool implements Brainpool elliptic curves.
6+
homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/brainpool
7+
license: other
8+
licenses:
9+
- sources: [email protected]/LICENSE
10+
text: |
11+
Copyright (c) 2009 The Go Authors. All rights reserved.
12+
13+
Redistribution and use in source and binary forms, with or without
14+
modification, are permitted provided that the following conditions are
15+
met:
16+
17+
* Redistributions of source code must retain the above copyright
18+
notice, this list of conditions and the following disclaimer.
19+
* Redistributions in binary form must reproduce the above
20+
copyright notice, this list of conditions and the following disclaimer
21+
in the documentation and/or other materials provided with the
22+
distribution.
23+
* Neither the name of Google Inc. nor the names of its
24+
contributors may be used to endorse or promote products derived from
25+
this software without specific prior written permission.
26+
27+
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
28+
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
29+
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
30+
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
31+
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
32+
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
33+
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
34+
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
35+
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
36+
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
37+
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
38+
- sources: [email protected]/PATENTS
39+
text: |
40+
Additional IP Rights Grant (Patents)
41+
42+
"This implementation" means the copyrightable works distributed by
43+
Google as part of the Go project.
44+
45+
Google hereby grants to You a perpetual, worldwide, non-exclusive,
46+
no-charge, royalty-free, irrevocable (except as stated in this section)
47+
patent license to make, have made, use, offer to sell, sell, import,
48+
transfer and otherwise run, modify and propagate the contents of this
49+
implementation of Go, where such license applies only to those patent
50+
claims, both currently owned or controlled by Google and acquired in
51+
the future, licensable by Google that are necessarily infringed by this
52+
implementation of Go. This grant does not include claims that would be
53+
infringed only as a consequence of further modification of this
54+
implementation. If you or your agent or exclusive licensee institute or
55+
order or agree to the institution of patent litigation against any
56+
entity (including a cross-claim or counterclaim in a lawsuit) alleging
57+
that this implementation of Go or any code incorporated within this
58+
implementation of Go constitutes direct or contributory patent
59+
infringement, or inducement of patent infringement, then any patent
60+
rights granted to you under this License for this implementation of Go
61+
shall terminate as of the date such litigation is filed.
62+
notices: []
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
1+
---
2+
name: github.com/ProtonMail/go-crypto/eax
3+
version: v0.0.0-20230923063757-afb1ddc0824c
4+
type: go
5+
summary: 'Package eax provides an implementation of the EAX (encrypt-authenticate-translate)
6+
mode of operation, as described in Bellare, Rogaway, and Wagner "THE EAX MODE OF
7+
OPERATION: A TWO-PASS AUTHENTICATED-ENCRYPTION SCHEME OPTIMIZED FOR SIMPLICITY AND
8+
EFFICIENCY." In FSE''04, volume 3017 of LNCS, 2004'
9+
homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/eax
10+
license: other
11+
licenses:
12+
- sources: [email protected]/LICENSE
13+
text: |
14+
Copyright (c) 2009 The Go Authors. All rights reserved.
15+
16+
Redistribution and use in source and binary forms, with or without
17+
modification, are permitted provided that the following conditions are
18+
met:
19+
20+
* Redistributions of source code must retain the above copyright
21+
notice, this list of conditions and the following disclaimer.
22+
* Redistributions in binary form must reproduce the above
23+
copyright notice, this list of conditions and the following disclaimer
24+
in the documentation and/or other materials provided with the
25+
distribution.
26+
* Neither the name of Google Inc. nor the names of its
27+
contributors may be used to endorse or promote products derived from
28+
this software without specific prior written permission.
29+
30+
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
31+
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
32+
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
33+
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
34+
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
35+
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
36+
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
37+
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
38+
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
39+
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
40+
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
41+
- sources: [email protected]/PATENTS
42+
text: |
43+
Additional IP Rights Grant (Patents)
44+
45+
"This implementation" means the copyrightable works distributed by
46+
Google as part of the Go project.
47+
48+
Google hereby grants to You a perpetual, worldwide, non-exclusive,
49+
no-charge, royalty-free, irrevocable (except as stated in this section)
50+
patent license to make, have made, use, offer to sell, sell, import,
51+
transfer and otherwise run, modify and propagate the contents of this
52+
implementation of Go, where such license applies only to those patent
53+
claims, both currently owned or controlled by Google and acquired in
54+
the future, licensable by Google that are necessarily infringed by this
55+
implementation of Go. This grant does not include claims that would be
56+
infringed only as a consequence of further modification of this
57+
implementation. If you or your agent or exclusive licensee institute or
58+
order or agree to the institution of patent litigation against any
59+
entity (including a cross-claim or counterclaim in a lawsuit) alleging
60+
that this implementation of Go or any code incorporated within this
61+
implementation of Go constitutes direct or contributory patent
62+
infringement, or inducement of patent infringement, then any patent
63+
rights granted to you under this License for this implementation of Go
64+
shall terminate as of the date such litigation is filed.
65+
notices: []
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
---
2+
name: github.com/ProtonMail/go-crypto/internal/byteutil
3+
version: v0.0.0-20230923063757-afb1ddc0824c
4+
type: go
5+
summary:
6+
homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/internal/byteutil
7+
license: other
8+
licenses:
9+
- sources: [email protected]/LICENSE
10+
text: |
11+
Copyright (c) 2009 The Go Authors. All rights reserved.
12+
13+
Redistribution and use in source and binary forms, with or without
14+
modification, are permitted provided that the following conditions are
15+
met:
16+
17+
* Redistributions of source code must retain the above copyright
18+
notice, this list of conditions and the following disclaimer.
19+
* Redistributions in binary form must reproduce the above
20+
copyright notice, this list of conditions and the following disclaimer
21+
in the documentation and/or other materials provided with the
22+
distribution.
23+
* Neither the name of Google Inc. nor the names of its
24+
contributors may be used to endorse or promote products derived from
25+
this software without specific prior written permission.
26+
27+
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
28+
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
29+
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
30+
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
31+
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
32+
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
33+
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
34+
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
35+
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
36+
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
37+
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
38+
- sources: [email protected]/PATENTS
39+
text: |
40+
Additional IP Rights Grant (Patents)
41+
42+
"This implementation" means the copyrightable works distributed by
43+
Google as part of the Go project.
44+
45+
Google hereby grants to You a perpetual, worldwide, non-exclusive,
46+
no-charge, royalty-free, irrevocable (except as stated in this section)
47+
patent license to make, have made, use, offer to sell, sell, import,
48+
transfer and otherwise run, modify and propagate the contents of this
49+
implementation of Go, where such license applies only to those patent
50+
claims, both currently owned or controlled by Google and acquired in
51+
the future, licensable by Google that are necessarily infringed by this
52+
implementation of Go. This grant does not include claims that would be
53+
infringed only as a consequence of further modification of this
54+
implementation. If you or your agent or exclusive licensee institute or
55+
order or agree to the institution of patent litigation against any
56+
entity (including a cross-claim or counterclaim in a lawsuit) alleging
57+
that this implementation of Go or any code incorporated within this
58+
implementation of Go constitutes direct or contributory patent
59+
infringement, or inducement of patent infringement, then any patent
60+
rights granted to you under this License for this implementation of Go
61+
shall terminate as of the date such litigation is filed.
62+
notices: []
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
1+
---
2+
name: github.com/ProtonMail/go-crypto/ocb
3+
version: v0.0.0-20230923063757-afb1ddc0824c
4+
type: go
5+
summary: 'Package ocb provides an implementation of the OCB (offset codebook) mode
6+
of operation, as described in RFC-7253 of the IRTF and in Rogaway, Bellare, Black
7+
and Krovetz - OCB: A BLOCK-CIPHER MODE OF OPERATION FOR EFFICIENT AUTHENTICATED
8+
ENCRYPTION (2003).'
9+
homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/ocb
10+
license: other
11+
licenses:
12+
- sources: [email protected]/LICENSE
13+
text: |
14+
Copyright (c) 2009 The Go Authors. All rights reserved.
15+
16+
Redistribution and use in source and binary forms, with or without
17+
modification, are permitted provided that the following conditions are
18+
met:
19+
20+
* Redistributions of source code must retain the above copyright
21+
notice, this list of conditions and the following disclaimer.
22+
* Redistributions in binary form must reproduce the above
23+
copyright notice, this list of conditions and the following disclaimer
24+
in the documentation and/or other materials provided with the
25+
distribution.
26+
* Neither the name of Google Inc. nor the names of its
27+
contributors may be used to endorse or promote products derived from
28+
this software without specific prior written permission.
29+
30+
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
31+
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
32+
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
33+
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
34+
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
35+
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
36+
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
37+
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
38+
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
39+
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
40+
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
41+
- sources: [email protected]/PATENTS
42+
text: |
43+
Additional IP Rights Grant (Patents)
44+
45+
"This implementation" means the copyrightable works distributed by
46+
Google as part of the Go project.
47+
48+
Google hereby grants to You a perpetual, worldwide, non-exclusive,
49+
no-charge, royalty-free, irrevocable (except as stated in this section)
50+
patent license to make, have made, use, offer to sell, sell, import,
51+
transfer and otherwise run, modify and propagate the contents of this
52+
implementation of Go, where such license applies only to those patent
53+
claims, both currently owned or controlled by Google and acquired in
54+
the future, licensable by Google that are necessarily infringed by this
55+
implementation of Go. This grant does not include claims that would be
56+
infringed only as a consequence of further modification of this
57+
implementation. If you or your agent or exclusive licensee institute or
58+
order or agree to the institution of patent litigation against any
59+
entity (including a cross-claim or counterclaim in a lawsuit) alleging
60+
that this implementation of Go or any code incorporated within this
61+
implementation of Go constitutes direct or contributory patent
62+
infringement, or inducement of patent infringement, then any patent
63+
rights granted to you under this License for this implementation of Go
64+
shall terminate as of the date such litigation is filed.
65+
notices: []

0 commit comments

Comments
 (0)