Quick --sign question

Gonzalo Bermúdez gonzalo.bermudez at fibertel.com.ar
Fri Jun 23 00:44:16 CEST 2006


On Thu, 22 Jun 2006 16:41:00 -0400
Gentoo-Wally <gentoowally at gmail.com> wrote:

> If you sign a file using --sign
> 
> gpg --output doc.sig --sign doc
> 
> the docs say....
> 
> http://www.gnupg.org/gph/en/manual.html#AEN136
> 
> "The document is compressed before being signed, and the output is in
> binary format."
> 
> This means that the output file doc.sig is compressed and signed.
> This does _NOT_ mean it is encrypted...correct? --sign does not sign
> and encrypt, right?

That is correct. In order to encrypt you should use --encrypt or
--symmetric.

> 
> Also, what is the compression method?

The compression methods available can be seen with gpg --version:

Compression: Uncompressed, ZIP, ZLIB, BZIP2

and the one actually used depends on the key's preferences and your gpg
capabilities if I'm not mistaken.

-- 
Saludos
Gonzalo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : /pipermail/attachments/20060622/4429ffa3/attachment.pgp


More information about the Gnupg-users mailing list