Hi! 👋 Here's a current list of changes:

Expand ECC support
Bump default and minimum key-derivation (S2K) cost parameters
Default to AES128 and SHA256 instead of CAST5 and RIPEMD160 for keys without preferred algorithms, as required by rfc4880bis-06 (rfc4880 required 3DES and SHA1)
Disallow generating RSA keys of less than 1024 bits (recommended by the audit)
Fix and move Signature.KeyExpired to PublicKey.KeyExpired; add Signature.SigExpired (x/crypto/openpgp: Incorrect comparison when checking if PGP key is expired golang/go#22312)
Detect expired signatures; though leaving it up to the caller whether they want to reject them
Use latest-created valid self-signature instead of the last-appearing one; don't drop other self-signatures when re-serializing the key
Add higher-level function to verify clearsigned messages, in order to be able to verify that the algorithm mentioned in the header matches the algorithm used in the signature (one of the findings of the audit)

We're hoping to merge these changes back into the original, so I won't add them to the readme for now, but I hope that's useful anyway ^.^

What is the difference between fork and original golang/crypto? #21

Description