GPG signature verification problem?

[Charly Avital]

Blumenthal, Uri wrote the following on 4/18/07 8:14 PM:
>> I have verified the e-mail (sent by Robert), twice: in the
>> original message from Robert, and in Robert's quoted message
>> in Uri's e-mail. Good signature.
> 
> That's a convincing proof.
> 
>>> The base 64 encoding of the signature is broken.
>> Uri: do you get blank spaces in Robert's signature?
> 
> Not that I can see... Every line except for the 
> very last one is full, and seems to have no weird
> characters (nor blanks) in it...

The signature text is displayed in lines of 64 ASCII characters. Blank
spaces are not ASCII characters, they would have broken the base 64 of
the signature.

The last line of a signature is composed of five ASCII characters.

The line before that last one can have less than 64 ASCII characters.


> On the other hand
> in your signature encoding, before the last short
> line the supposedly-long line appears truncated.

Could you verify my signature?

> 
> Here's Robert's sig again:
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (Darwin)
> 
> iQEcBAEBCgAGBQJGJiWiAAoJELcA9IL+r4EJCTcH/RUOxI6RNuuu2WaCpAeJLfHs
> 0u+KzJ6MALtonHQOkAbhDTw8zTC+OTHEuN/t2+dwli6E8r7F61RIMpLyPiZpfS0y
> rQjHMqJPMdr7Xerhn1haGdov2MzbvtloqHBEP9T65fstTEYBXoYMDSNhYVRV1Fpz
> g+is39fVr6D3LZ5W50VQhtTwmcpGM7ZKl4XSgqtv2UwwPM7dYjMQ+Qgz+5MnPLe3
> wZlD06/bvrbY5InFRQFMaFhNtVAC6v42G6W8AOv8WD0kXJCopUGOwYelQ40qhdug
> DvXWxpApv7jgmStms63AlG3TjQemwF3rkreFsk9IClAZ5T3EpTafqVd3HC4oYBc=
> =OqFT
> -----END PGP SIGNATURE-----

Seems fine.

> 
> 
> 
> Here's your sig:
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.3 (Darwin)
> Comment: GnuPG for Privacy
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iQEVAwUBRiZKPc3GMi2FW4PvAQheawf/SDxB8cfw8chNrPDWXyY6Hat7NZtcitzR
> /fjqWbEXQ5tM7fEmGNtbEWVLwGwBLrO1Cnf12YVNI2tV5HeeE7e9XQcdq826A4/C
> W2hSH1jhevAD+A9EVfOneAMKVOZwCOYTGVWVpBqUyHp9E1Of9QAS+HwCOibIdIKK
> QzoemFH4PR0pBEoycRJsIpfN8Wbpf2mOYiTi9XLCiRadcZeAbFWqVMOYFBQHZ8cY
> NATwN4NHPgFE6wMVodJuBYcMupn1T5AatvlLLgB1YwJLjyKhT7ASwzp4Jlg40ho5
> EMqCQHEEcEn7bUnz1+0tUEWR60CaPd1ZDB3gocuQd6tIvwReH5kctA==
> =8BZI
> -----END PGP SIGNATURE-----

Could you verify my signature?

Charly