Canonical Explores Replacing GnuPG With Rust-Based Sequoia PGP

Canonical is exploring a transition for Ubuntu by replacing the legacy GnuPG implementation with Sequoia PGP, a modern alternative written in Rust.

Sequoia PGP provides a collection of libraries and tools implementing the OpenPGP standard. Moving to this implementation addresses maintenance challenges associated with older cryptographic libraries. The codebase is structured to be more modular and easier to audit, improving the long-term viability of package signing and verification processes.

Development efforts focus on how the integration will function within the existing package management infrastructure. Because GnuPG is deeply embedded in various system workflows, the transition requires careful testing to ensure compatibility with established signing keys and existing repository structures. This follows similar efforts to incorporate Rust into the kernel and other low-level utilities.

The project remains in the early stages. Developers tracking these updates can anticipate further technical documentation on the implementation timeline as the integration reaches a more functional state.