Development/gpg4libre

From The Document Foundation Wiki
Jump to: navigation, search

Support for OpenPGP/GnuPG signing and encryption in LibreOffice

Starting with version 5.4.0, LibreOffice - in addition to X509-certificates - can also use locally-available GnuPG keys to sign ODF documents on Linux

Starting with version 6.0.0, LibreOffice supports OpenPGP keys on all desktop platforms, and also enables experimental ODF document encryption.

From the release notes:

  • on all desktop platforms, you can now use OpenPGP keys to sign ODF documents. tdf#89037 (Katarína Behrens, Samuel Mehrbrodt, Thorsten Behrens - CIB)
  • there is (experimental) support for OpenPGP-based document encryption as well
  • you need auxiliary software to make use of that feature (LibreOffice will transparently merge available keys if you have the below installed):
    • for Windows, download [1]
    • for Mac, download [2] (some howto is here )
    • for Linux, usually installing a gnupg/gpg package will be enough, perhaps with an additional keymanagement frontend like kleopatra or seahorse. Package names will depend on your Linux distribution
Document with invalid signature

This feature was funded in 2017 by the German Federal Office for Information Security

Further information

There has been a recorded talk during FrOSCon 2017 about the ongoing work, including some technical details: https://programm.froscon.de/2017/events/1996.html

Video: https://media.ccc.de/v/froscon2017-1996-gpg4libre_-_openpgp_signing_encryption_in_libreoffice