encryption/signing library for Lua

[ananasblau]

The game I'm working on will support mods and I plan to do this in a orderly fashion from the very start on. Hence I'm looking for a Lua library to validate signatures, all in the name of security, not to keep control, players will still be able to use "wild" mods. Something OpenPGP would be awesome but anything more basic is just as fine.

To got into a bit more detail: I plan to accept mods, distribute them in-game from my server. For signing I'd prefer signing the mod with a private key (which might never ever leave my own computer) and validate this signature by the game clients with a public key which all clients do know.

I did find NetPGP which has lua binding (but also far too many features) and one, two js implementations which could be a good read when implementing a Lua lib.

So, anyone seen a lua library for this? Or who'd be interested in joining forces to implement one?