From: David Shaw [mailto:dshaw@jabberwocky.com]=20 >This is not correct. PGP uses all 160 bits of=20 >the SHA1 fingerprint, giving 80 bits of collision=20 >resistance. Hmm... You're right. 40 hex digits is 160 bits. My brain seems to be cramping more and more often these days.