--digest-algo (feature request)
Atom 'Smasher'
atom at suspicious.org
Thu Jul 15 07:42:52 CEST 2004
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
if i set "digest-algo" to "SHA256" and try to sign something with a DSS
key, it fails (after typing a password, which makes it even more
annoying).
should signing with a DSS key ignore --digest-algo (and always use SHA1)??
is there (or should there be) a better way to match larger hashes with
larger (non-DSS) signing keys?
if i have a 4096 RSA primary key and a DSS subkey (oh, wait a minute, i
*do* have that ;) should there be a way to specify (in the configuration
file) that i want to use a larger hash if i'm signing with my 4096 RSA
key, while not causing problems for my DSS key?
what if i generate a 2048 RSA signing subkey... let's say i want to
specify (in my config) that i want to use SHA-512 if i'm signing something
with my 4096 key; and SHA-256 if i'm signing something with a 2048 key...
and of course, DSS still needs SHA-1.
...atom
_________________________________________
PGP key - http://atom.smasher.org/pgp.txt
762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808
-------------------------------------------------
"Today every inhabitant of this planet must contemplate the
day when this planet may no longer be habitable. Every man,
woman and child lives under a nuclear sword of Damocles,
hanging by the slenderest of threads, capable of being cut
at any moment by accident or miscalculation or madness."
-- John F. Kennedy
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.6 (FreeBSD)
Comment: What is this gibberish?
Comment: http://atom.smasher.org/links/#digital_signatures
iEYEARECAAYFAkD2GWIACgkQnCgLvz19QeOFIgCdGRrXt2rzSVGc6cAzAoYAfkt2
q7MAnj8Hy/sXsftvt/86gqOpjaaDgGlh
=5xKh
-----END PGP SIGNATURE-----
More information about the Gnupg-devel
mailing list