Lionel Elie Mamane lionel at mamane.lu
Fri Sep 29 07:11:12 CEST 2006

On Sat, Sep 23, 2006 at 03:15:07PM +0200, Carlo Luciano Bianco wrote:

> I just try to summarize what I understood from this thread about
> OpenPGP implementation of DSA and RSA signatures, so you can correct
> me if I am wrong: ;-) 

>  - DSA does not support "firewalled hashes"

Not exactly. Version 3 DSA signatures lack a hash firewall. But
version 4 DSA signatures do have a hash firewall. The version refers
not to a version of DSA itself, but the version of the OpenPGP packet
format being used.

> On the other hand:

>  - RSA does support "firewalled hashes".

All RSA signatures (V3 or V4) do have a hash firewall, yes.


More information about the Gnupg-devel mailing list