Wrong signature hash detection?
dougb at dougbarton.us
Fri May 7 18:39:45 CEST 2010
On 05/06/10 19:43, Hauke Laging wrote:
> I have created signatures with different keys for a JPEG file. You can find
> both the graphics file and the signatures on this web page:
> If I check the signatures, gpg2 2.0.15 (and at least .14, too) returns the
> wrong hash (unless I misunderstand something):
You do. :) But since no one has pointed out the actual problem yet,
here you go ... The sha1 _hash_ of the file organspende.jpg is
e4c4bea661f2d50e20213eb8412e7f47222289d0. What you're looking at are PGP
signatures based on that hash.
... and that's just a little bit of history repeating.
Improve the effectiveness of your Internet presence with
a domain name makeover! http://SupersetSolutions.com/
More information about the Gnupg-users