PGPony: PGP & GPG Encryption

Post-quantum signatures. Create ML-DSA-65 + Ed25519 keys (RFC 9980), sign and verify with them, and add post-quantum subkeys to a key you already have, including the v4 shape GnuPG 2.5 reads. Several recipients. A message to two or more recipients that includes post-quantum keys now decrypts for every one of them. Before, it could fail to decrypt. NIST curves. P-256, P-384 and P-521 keys now encrypt, decrypt, sign and verify, not just import. Key Detail, reorganized. Actions now sit in a menu in the corner. Add, revoke or remove subkeys and User IDs, then upload the updated key to key servers from the same screen, with the primary identity kept the way you set it. Encrypting. Pick which subkey to encrypt to when a key has more than one, see which of your keys decrypted a message, and get a warning when a message mixes post-quantum and classic recipients. Key servers. Add your own key servers, and turn Web Key Directory lookups on or off. Files made with gpg -c --force-aead now decrypt. Security hardening. Stricter checks on keys and messages that come from outside, and tighter limits on what PGPony will read. Keys whose signatures this device cannot verify (some older DSA, brainpool and Ed448 keys) are now only updated when you re-import them yourself. If you write to someone with such a key, compare its fingerprint with them once. Thanks to the testers who sent sample files and step-by-step reports for this release.