gnupg clearsigning question

Alphax alphasigmax at gmail.com
Thu Dec 28 14:04:18 CET 2006


David Shaw wrote:
> On Wed, Dec 27, 2006 at 01:25:34PM -0500, vedaal at hush.com wrote:
>> is it possible to construct a gnupg signature that is the same each 
>> time
>> for the same file (and same signing key and hash ) ?
>>
>> would like to do something like this for use as a truecrypt keyfile:
>>
>> the truecrypt volume is on a usb drive,
>> the outer volume would contain the gnupg keyrings,
>> the rest of the usb drive contains miscellenaous files,
>> one of these is used for a keyfile for the outer volume,
>>
>> now,
>> what i would like to do,
>> is clearsign one of the many textfiles on the usb,
>> and use that clearsigned textfile as a keyfile for the hidden volume
>>
>>
>> the problem is,
>> that this changes each time it is signed ;-(((
>>
>> is the only reason it changes because of the timestamp?
>> (and then would just resetting the computer clock to time time of 
>> the original signing work?
>> assuming it would be set to a minute or so before, and signed 
>> repeatedly until the timestamp was right to the second)
>>
>> if the timestamp is the only thing making the signature different,
>> would it be possible to request a feature option where the 
>> timestamp is omitted?
>> (this wouldn't affect open-pgp compatibility)
> 
> DSA signatures contain random data, so even if you hacked around the
> timestamp problem, the signature would not match.  RSA signatures do
> not contain random data.
> 

Err, I thought it was the other way around, which is why RSA signatures
are bigger than DSA signatures... or is the RSA signature
packaging-thing something else?

-- 
                Alphax
        Death to all fanatics!
  Down with categorical imperative!
OpenPGP key: http://tinyurl.com/lvq4g

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 542 bytes
Desc: OpenPGP digital signature
Url : /pipermail/attachments/20061228/679c05c2/attachment.pgp 


More information about the Gnupg-users mailing list