Subpackets

[Brian M. Carlson]

--AAiVQQES42Kk67ff
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 18, 2002 at 05:22:14PM -0400, David Shaw wrote:
> On Wed, Jul 17, 2002 at 02:35:58AM +0000, Brian M. Carlson wrote:
>=20
> > I noticed that the Issuer KeyID is not a hashed subpacket. Is there
> > a particular reason this is so? Is there a reason to not hash any
> > subpacket?
>=20
> I imagine it is because there is no real benefit to protecting it (no
> harm either, of course).

Well, it would be detected if it were changed, wouldn't it? I see that
as a benefit.
=20
> The end result of an attacker changing the keyid in the unhashed area
> and the end result of an attacker changing the keyid in the hashed
> area is the same.

Well, if you mean that it was changed, yes.

I also remember seeing something somewhere in the code (I don't remember
where, and I couldn't find it) that showed which subpackets were
protected, and which weren't. Perhaps you could point me to the right
file or so?

--=20
Brian M. Carlson <karlsson@hal-pc.org> <http://decoy.wox.org/~bmc> 0x560553=
E7
Life is the urge to ecstasy.

--AAiVQQES42Kk67ff
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.1.90 (GNU/Linux)
Comment: Ubi libertas, ibi patria.

iQFKBAEBAwA0BQI9NzkWLRpodHRwOi8vZGVjb3kud294Lm9yZy9+Ym1jL29wZW5w
Z3AvcG9saWN5LnRleAAKCRDlkf/JVgVT53fACACiJUylZogBvpfw0fckKch3P5MK
vpdd01ZlN75TaTnCBxtPmIGTyWdP4HLkd6sZhbiK9rERdSbz33ZzKDTnR+MY2nOi
zY6Jwx5Qt90aO0nTa1a0WCpyV8wMyJnXVVsTzWUYjp3BfcT7WJtLeomSSpdrWIMM
B9RH+aRd7vf0pLzR4dJepL9yRJl4FOeF5eyKO0qN81MzFPjr/20Hap2hAA/qZEcn
KkSWPWm9R96CUtj29znhH/lvwj/iJYs3ajWwyIguaVhjRe1xsIV1+iPNXo/u2RWJ
jOaC91cCfycTZb8PmLqPItLK3coBbXIwTTn0KXBoWrR4nbZZhpjsVasoHlsB
=c+rG
-----END PGP SIGNATURE-----
Signature policy: http://decoy.wox.org/~bmc/openpgp/policy.tex

--AAiVQQES42Kk67ff--