RSA v4 keys

taurus1 taurus1 at hotpop.com
Sat Nov 15 02:43:26 CET 2003


Hello David Shaw,

On Fri, 14 Nov 2003 07:54:27 -0500, you wrote:
<big snip here>
   >> :signature packet: algo 1, keyid 63FCD21A4A5C8066
>>         version 3, created 1068589973, md5len 5, sigclass 18
>>         digest algo 2, begin of digest d1 62
>>         data: [2048 bits]
>
>Nothing is broken here.  You have a v3 signature on your subkey, which
Is this explicit in the quoted text above?

>implicitly makes it a sign+encrypt subkey.  When GnuPG sees a usable
>subkey, it uses it instead of the primary.  PGP can't make signatures
>with subkeys, so it uses the primary.  Everything is working as it
>should.
Understood.

>That said, while the key is valid, the makeup of the key
>is... eccentric.  You have a self-signature with class 10, which GnuPG
>doesn't generate.  PGP does generate it, but it wouldn't have put
>Blowfish in the preferences.  Then you have a v3 subkey binding
>signature which neither GnuPG or PGP generates.  The key flags are
>missing completely, making your primary key into a "sign+encrypt" key.
>
Thank you for elucidating this to us.

>What did you use to make this key?
I think used pgpckt08, but I make a similar key using gpg with WinPT front
end with same results, (will test it again).

After I read your post, I made a sig only RSA key and an encrypt sub key,
using gpg command line, and it works as expected.;o)

You need a passphrase to unlock the secret key for
user: "Test2 <test2 at test.mail>"
2048-bit RSA key, ID 263EE8D8, created 2003-11-15

gpg: writing to `c:\windows\temp\~gpgtray.tmp'
gpg: RSA signature from: "263EE8D8 Test2 <test2 at test.mail>"

**************************
Here are list-packets output of test2 key:

C:\GnuPG>gpg --export 263EE8D8 | gpg --list-packets
gpg: writing to stdout
:public key packet:
        version 4, algo 1, created 1068859781, expires 0
        pkey[0]: [2048 bits]
        pkey[1]: [6 bits]
:user ID packet: "Test2 <test2 at test.mail>"
:signature packet: algo 1, keyid D8AD2D5D263EE8D8
        version 4, created 1068859781, md5len 0, sigclass 13
        digest algo 2, begin of digest a5 f4
        hashed subpkt 2 len 4 (sig created 2003-11-15)
        hashed subpkt 27 len 1 (key flags: 03)
        hashed subpkt 11 len 6 (pref-sym-algos: 9 8 7 3 2 1)
        hashed subpkt 21 len 2 (pref-hash-algos: 2 3)
        hashed subpkt 22 len 2 (pref-zip-algos: 2 1)
        hashed subpkt 30 len 1 (features: 01)
        hashed subpkt 23 len 1 (key server preferences: 80)
        subpkt 16 len 8 (issuer key ID D8AD2D5D263EE8D8)
        data: [2047 bits]
:public sub key packet:
        version 4, algo 1, created 1068860188, expires 0
        pkey[0]: [4096 bits]
        pkey[1]: [6 bits]
:signature packet: algo 1, keyid D8AD2D5D263EE8D8
        version 4, created 1068860188, md5len 0, sigclass 18
        digest algo 2, begin of digest 8a 56
        hashed subpkt 2 len 4 (sig created 2003-11-15)
        hashed subpkt 27 len 1 (key flags: 0C)
        subpkt 16 len 8 (issuer key ID D8AD2D5D263EE8D8)
        data: [2046 bits]

Thank you for your support.
-- 
taur




More information about the Gnupg-users mailing list