Wrong signature hash detection?

[Doug Barton]

On 05/06/10 19:43, Hauke Laging wrote:
> Hello,
> 
> I have created signatures with different keys for a JPEG file. You can find 
> both the graphics file and the signatures on this web page:
> 
> http://www.hauke-laging.de/organspende.html
> 
> If I check the signatures, gpg2 2.0.15 (and at least .14, too) returns the 
> wrong hash (unless I misunderstand something):

You do. :)  But since no one has pointed out the actual problem yet,
here you go ... The sha1 _hash_ of the file organspende.jpg is
e4c4bea661f2d50e20213eb8412e7f47222289d0. What you're looking at are PGP
signatures based on that hash.


hth,

Doug

-- 

	... and that's just a little bit of history repeating.
			-- Propellerheads

	Improve the effectiveness of your Internet presence with
	a domain name makeover!    http://SupersetSolutions.com/