Reading the thread in the KDE bugtracker, it appears the upstream maintainers wish to force us to use the 1.9 branch of OpenPGP, which is tagged by the OpenPGP upstream as development/beta code. Furthermore, that code isn't currently included in Debian. This presents a serious problem for this package.