DSA and ECC (was: Looking for Elgamal sign+encrypt key information)

Per Tunedal Casual pt at radvis.nu
Wed Mar 24 22:59:02 CET 2004

At 21:57 2004-03-23, you wrote:
 >> longer hash would be needed to make any use of longer signing keys. With
 >> the "old" RSA signature algo a much longer hash can be used e.g. the
 >> forthcoming SHA-256.
 >"forthcoming SHA-256"???
 >gpg 1.2.4 can handle SHA256, but only to verify, not to sign.
 >1.3.5 handles SHA256 (H8), SHA384 (H9) and SHA512 (H10).
Exactly, the production version of GnuPG (1.2.4) doesn't use SHA-256 for 
signing, but only for verifying. David Shaw explained some time ago that 
this is a way of making way for a wider use in future versions. Thus: 
forthcoming ...
Per Tunedal

More information about the Gnupg-users mailing list