Software development services (Германия - Тендер #42828635)

Sequoia PGP

OpenPGP is a standard that enables encrypted end-to-end communication via email as well as signing and

verification of software packages. This makes it a critical standard for many basic applications of the Internet,

such as secure communications and securing the software supply chain. Supporting and promoting multiple

interoperable implementations can strengthen the resilience of the standard and ecosystem by ensuring broad

adoption and eliminating bugs.

SequoiaPGP is a modern OpenPGP implementation with a focus on security and interoperability. It achieves

this by being written in Rust, a so-called "memory safe language",and by having an extensive testing

infrastructure to ensure that the implementation not only works as intended, but also works well with other

implementations.

The Sequoia-PGP project works to make use of cryptography for privacy and authentication in communication more commonplace. The project produces and maintains an implementation of the OpenPGP standard that’s easy and uncomplicated to use. Sequoia seeks to provide easy-to-use encryption methods for any communication transport technology and improve the Public Key Infrastructure. Furthermore, OpenPGP is used widely in the IT industry and by free and open source projects to verify the authenticity of software packages, and for encrypting and authenticating messages. The Sequoia team engages in redesigning and rebuilding a decentralized infrastructure for verifying repositores, to improve supply chain security.

As part of this partnership, the team behind Sequoia is planning to improve sq, the command line tool, engage in standard setting work, improve the Sequoia library as well as assist in implementing Sequoia.

As a research and development service, the contract is excluded from the scope of application of public procurement law (cf. Section 116 (1) No. 2 Act against Restraints on Competition).