GPG and 1024-bit (or multiple) subkeys

John Clizbe JPClizbe at comcast.net
Tue Aug 15 21:52:59 CEST 2006


Charles Franklin Bernard wrote:
>> > So I added another subkey, 2048-bit, but the customer says GPG is
>> > looking for a 2048 subkey *by itself*.  Does that make sense?
>>
>> Not especially.  Subkeys don't exist in isolation.  They only exist as
>> part of a larger key.
>>
>> Your customer's request doesn't appear to be particularly well-phrased.
>>  That's going to limit any help anyone on the list can provide.
> 
> "By itself" meaning a key without any other subkey.  They want us to
> generate a new public key with only one subkey, and that at 2048-bit
> instead of 1024.  

That requirement sounds like a RSA key instead of a DSA/ElGamal key pair.

Adding a subkey should meet the customer's needs unless someone in the
customer's IT organization doesn't understand the details of OpenPGP very well.

Individual subkeys may be specified by adding ! to the key ID, eg. 0xDecafBad!


-- 
John P. Clizbe                   Inet:   JPClizbe(a)comcast DOT nyet
Golden Bear Networks             PGP/GPG KeyID: 0x608D2A10
"Be who you are and say what you feel because those who mind don't matter
and those who matter don't mind." - Dr Seuss, "Oh the Places You'll Go"

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 662 bytes
Desc: OpenPGP digital signature
Url : /pipermail/attachments/20060815/657d754c/signature.pgp


More information about the Gnupg-users mailing list