A new version of the Python module which wraps GnuPG has been released. What Changed? ============= This is an enhancement and bug-fix release, but the bug-fixes include some security improvements, so all users are encouraged to upgrade. See the project website [1] for more information. Brief summary: * Added an 'output' keyword parameter to the 'sign' and   'sign_file' methods, to allow writing the signature to a file.   * Allowed specifying 'True' for the 'sign' keyword parameter,   which allows use of the default key for signing and avoids   having to specify a key id when it's desired to use the default.   * Used a uniform approach with subprocess on Windows and POSIX:   shell=True is not used on either.   * When signing/verifying, the status is updated to reflect any   expired or revoked keys or signatures. * Handled 'NOTATION_NAME' and 'NOTATION_DATA' during verification. * Fixed #1, #16, #18, #20: Quoting approach changed, since now   shell=False.   * Fixed #14: Handled 'NEED_PASSPHRASE_PIN' message. * Fixed #8: Added a scan_keys method to allow scanning of keys   without the need to import into a keyring. * Fixed #5: Added '0x' prefix when searching for keys. * Fixed #4: Handled 'PROGRESS' message during encryption. * Fixed #3: Changed default encoding to Latin-1.   * Fixed #2: Raised ValueError if no recipients were specified   for an asymmetric encryption request. * Handled 'UNEXPECTED' message during verification.   * Replaced old range(len(X)) idiom with enumerate().   * Refactored ``ListKeys`` / ``SearchKeys`` classes to maximise   use of common functions.   * Fixed GC94: Added ``export-minimal`` and ``armor`` options   when exporting keys. This addition was inadvertently left out   of 0.3.6. This release [2] has been signed with my code signing key: Vinay Sajip (CODE SIGNING KEY) <vinay_sajip@yahoo.co.uk> Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86 What Does It Do? ================ The gnupg module allows Python programs to make use of the functionality provided by the Gnu Privacy Guard (abbreviated GPG or GnuPG). Using this module, Python programs can encrypt and decrypt data, digitally sign documents and verify digital signatures, manage (generate, list and delete) encryption keys, using proven Public Key Infrastructure (PKI) encryption technology based on OpenPGP. This module is expected to be used with Python versions >= 2.4, as it makes use of the subprocess module which appeared in that version of Python. This module is a newer version derived from earlier work by Andrew Kuchling, Richard Jones and Steve Traugott. A test suite using unittest is included with the source distribution. Simple usage:

...

...

import gnupg gpg = gnupg.GPG(gnupghome='/path/to/keyring/directory') gpg.list_keys() [{   ...   'fingerprint': 'F819EE7705497D73E3CCEE65197D5DAC68F1AAB2',   'keyid': '197D5DAC68F1AAB2',   'length': '1024',   'type': 'pub',   'uids': ['', 'Gary Gross (A test user) <gary.gr... at gamma.com>']},  {   ...   'fingerprint': '37F24DD4B918CC264D4F31D60C5FEFA7A921FC4A',   'keyid': '0C5FEFA7A921FC4A',   'length': '1024',   ...   'uids': ['', 'Danny Davis (A test user) <danny.da... at delta.com>']}] encrypted = gpg.encrypt("Hello, world!", ['0C5FEFA7A921FC4A']) str(encrypted) '-----BEGIN PGP MESSAGE-----\nVersion: GnuPG v1.4.9 (GNU/Linux)\n \nhQIOA/6NHMDTXUwcEAf ... -----END PGP MESSAGE-----\n' decrypted = gpg.decrypt(str(encrypted), passphrase='secret') str(decrypted) 'Hello, world!' signed = gpg.sign("Goodbye, world!", passphrase='secret') verified = gpg.verify(str(signed)) print "Verified" if verified else "Not verified" 'Verified'

As always, your feedback is most welcome (especially bug reports [3], patches and suggestions for improvement, or any other points via the mailing list/discussion group [4]). Enjoy! Cheers Vinay Sajip Red Dove Consultants Ltd. [1] https://bitbucket.org/vinay.sajip/python-gnupg [2] https://pypi.python.org/pypi/python-gnupg/0.3.7 [3] https://bitbucket.org/vinay.sajip/python-gnupg/issues [4] https://groups.google.com/forum/#!forum/python-gnupg