Add option to use system GPG instead of Go library for PQC key support

Question

Opened this issue 2 months ago · 0 comments

Currently Gitea uses ProtonMail/go-crypto which doesn't support post-quantum algorithms like Kyber/ML-KEM.

Proposal: Add configuration option to use system gpg binary for all operations:

[repository.signing]
USE_SYSTEM_GPG = true
GPG_PROGRAM = /usr/bin/gpg

This would allow using GPG 2.5+ with full PQC support.

No response