New getkey.c code (was: Warning message with 1.0.4f)
Werner Koch
wk@gnupg.org
Sun Apr 1 13:05:02 2001
On Sat, 31 Mar 2001, Brian Galbraith wrote:
> Apologies.....but would you mind explaining the advantages of the new
> code?
The new code in getkey.c solves a couple of problems:
* Key and user ID expiration or revocation does now work correct.
* There is a way to figure out the "primary" User ID.
* GnuPG select the appropriate subkey in case you have several of
them
* Key flags (at leats needed for RSA keys) are supported.
* Probably more things I can't remember right now.
It does now only use the public key for selection because:
* Nearly all information in the secret key is a duplicate of the
public key.
* It is very difficult to keep public and secret key syncronized.
* It prepares a way to replace the secret keyring with a simpler
mechanism, i.e. just store the really secret information
* The code complexity is reduced because there are less syncronization
issues and no need to duplicate a lot of code for public key and
secret key usage.
BTW, be warned that in future you won't be able to just copy
pubring.gpg - instead you have to use the --export and --import
commands.
Ciao,
Werner
--
Werner Koch Omnis enim res, quae dando non deficit, dum habetur
g10 Code et non datur, nondum habetur, quomodo habenda est.
Privacy Solutions -- Augustinus