Over on
https://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/2015-August/002816.html ,
we were discussing getting gpg and gpgv to avoid linking to libksba.

Werner wrote:

On Wed 2015-08-12 02:38:48 -0400, Werner Koch wrote:

The use of libksba is unfortunate:

1. FIXME: Libkeybox.a links to libksba thus we need to add libksba
2. here, even that it is not used by gpg. A proper solution would
3. either to split up libkeybox.a or to use a separate keybox daemon. libkeybox implements the keybox format, which supports X.509 and OpenPGP. It is required to insert or search X.509 certificates but gpg does not do this. Thus we can split it up and build two of the keybox convenience libraries - one for general use and one for use by gpg and gpgv. Shall I do that for 2.1.8?

I think this sounds like the right solution to the problem.