A lightweight library for creating and verifying OpenPGP signatures
PGP is the cryptographic standard used to sign git commits, and I wanted to provide isomorphic-git users a way
to tap into that power without sacrificing bundle size or worrying about LGPL restrictions.
So I wrote an entirely new JavaScript library with that narrow use case in mind.
Please read and understand the limitations of the sign-and-verify module before using it.
This library does not implement encryption or decryption - only signing and verifying signatures.
| Size | License | Sign | Verify | Encrypt | Decrypt | |
|---|---|---|---|---|---|---|
| isomorphic-pgp | ~17 kb | MIT | 🗹 | 🗹 | ☐ | ☐ |
| OpenPGP.js | ~170 kb | LGPL | 🗹 | 🗹 | 🗹 | 🗹 |
| kbpgp | ~160 kb | BSD | 🗹 | 🗹 | 🗹 | 🗹 |
See individual READMEs for each package:
MIT