"sig!3" entry vs "sig!" entry on certain GnuPG keys from the PuTTY
software site
synth_spring at Safe-mail.net
synth_spring at Safe-mail.net
Thu Aug 24 23:28:13 CEST 2006
The web site for the PuTTY software provides GnuPG keys to verify downloads of the PuTTY software. see http://www.chiark.greenend.org.uk/~sgtatham/putty/keys.html
With these keys imported into the GnuPG public keyring, issuing "gpg --check-sigs" produced the following output (the user name has been redacted):
C:/Documents and Settings/[redacted]/Application Data/gnupg\pubring.gpg
-------------------------------------------------------------------------
pub 1024R/1E34AC41 2000-12-20
uid PuTTY Master Key (RSA) <putty-bugs at lists.tartarus.org>
sig! 1E34AC41 2000-12-20 PuTTY Master Key (RSA) <putty-bugs at lists.tarta
rus.org>
sig! B41CAE29 2000-12-20 PuTTY Releases (RSA) <putty-bugs at lists.tartaru
s.org>
sig! 32B903A9 2000-12-20 PuTTY Development Snapshots (RSA) <putty-bugs@
lists.tartarus.org>
pub 1024R/B41CAE29 2000-12-20
uid PuTTY Releases (RSA) <putty-bugs at lists.tartarus.org>
sig! B41CAE29 2000-12-20 PuTTY Releases (RSA) <putty-bugs at lists.tartaru
s.org>
sig! 1E34AC41 2000-12-20 PuTTY Master Key (RSA) <putty-bugs at lists.tarta
rus.org>
pub 1024R/32B903A9 2000-12-20
uid PuTTY Development Snapshots (RSA) <putty-bugs at lists.tartaru
s.org>
sig! 32B903A9 2000-12-20 PuTTY Development Snapshots (RSA) <putty-bugs@
lists.tartarus.org>
sig! 1E34AC41 2000-12-20 PuTTY Master Key (RSA) <putty-bugs at lists.tarta
rus.org>
pub 1024D/6A93B34E 2000-12-20
uid PuTTY Master Key (DSA) <putty-bugs at lists.tartarus.org>
sig!3 6A93B34E 2000-12-20 PuTTY Master Key (DSA) <putty-bugs at lists.tarta
rus.org>
sig! 08B0A90B 2000-12-20 PuTTY Releases (DSA) <putty-bugs at lists.tartaru
s.org>
sig! 7D3E4A00 2000-12-20 PuTTY Development Snapshots (DSA) <putty-bugs@
lists.tartarus.org>
pub 1024D/08B0A90B 2000-12-20
uid PuTTY Releases (DSA) <putty-bugs at lists.tartarus.org>
sig!3 08B0A90B 2000-12-20 PuTTY Releases (DSA) <putty-bugs at lists.tartaru
s.org>
sig! 6A93B34E 2000-12-20 PuTTY Master Key (DSA) <putty-bugs at lists.tarta
rus.org>
pub 1024D/7D3E4A00 2000-12-20
uid PuTTY Development Snapshots (DSA) <putty-bugs at lists.tartaru
s.org>
sig!3 7D3E4A00 2000-12-20 PuTTY Development Snapshots (DSA) <putty-bugs@
lists.tartarus.org>
sig! 6A93B34E 2000-12-20 PuTTY Master Key (DSA) <putty-bugs at lists.tarta
rus.org>
4 signatures not checked due to missing keys
For the self-signatures on the DSA-type keys (and only the DSA-type keys) there is a "sig!3" entry instead of a "sig!" entry. The other signatures on the DSA-type keys just have a "sig!" entry. It has been said elsewhere that the 3 in the "sig!3" entry indicates a certificate check level of 3. However, the 3 does not appear on the self-signature entries for the RSA-type keys. Is this to do with the key types (the DSA type and the RSA type), the way that the keys were created and/or signed, or some other reason?
More information about the Gnupg-users
mailing list