the best signature type someone can give me

David Shaw dshaw at jabberwocky.com
Mon Oct 31 19:46:28 CET 2005


On Mon, Oct 31, 2005 at 10:25:26AM +0100, Christoph Anton Mitterer wrote:
> Ah,.. an I forgot the following:
> 
> I know you can change the has-alorithm that is used for making 
> signatures. Does this applay for UID-signatures, too?
> 
> If so,... should I (for security/cryptography reasons) ask users to sign 
> my key only with SHA512 (or whatever is considered as the currently 
> strongest hash)? And/or should I sign others UIDs only with SHA512 (..) ?

This is up to you, but note that most OpenPGP programs don't support
SHA512 yet.  Also note that most people have a DSA primary key and
thus can't use any hash larger than 160 bits.

David



More information about the Gnupg-users mailing list