GnuPG 2 does not import older keys with RSA-E and RSA-S anymore

Werner Koch wk at gnupg.org
Mon Sep 21 10:15:05 CEST 2009


On Wed, 16 Sep 2009 11:50, bernhard at intevation.de said:

> following algorithms anymore:     
>       2          - RSA Encrypt-Only [HAC]
>       3          - RSA Sign-Only [HAC]
> rfc4880 notes:
>    Encrypt-Only (2) and RSA Sign-Only are deprecated and SHOULD NOT be
>    generated, but may be interpreted.

I have not seen such keys for years.  Software used to create such keys
most likely also used MD5 as a hash algorithm and thus these keys should
be considered broken.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Auschnahme regelt ein Bundeschgesetz.




More information about the Gnupg-devel mailing list