[PATCH] Allow printing key digests in key edit

Werner Koch wk at gnupg.org
Mon Jan 30 09:32:58 CET 2012


On Sun, 29 Jan 2012 16:23, christian at quelltextlich.at said:

> Although SHA1 is considered to be broken by some, key-signing parties

That is plain nonsense.  It is not yet possible to compute collisions,
let a anone a second preimage.

> The patch added below, adds a "digest" command in the --edit-keys menu, that allows to compute further digests of keys.

These are not defined by OpenPGP and thus I strongly advise against its
use.  SHA-1 is an integral part of OpenPGP; it doesn't help if you come
up with a different way of computing a fingerprint.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.




More information about the Gnupg-devel mailing list