Quick --sign question

David Shaw dshaw at jabberwocky.com
Fri Jun 23 02:18:02 CEST 2006


On Thu, Jun 22, 2006 at 04:41:00PM -0400, Gentoo-Wally wrote:
> If you sign a file using --sign
> 
> gpg --output doc.sig --sign doc
> 
> the docs say....
> 
> http://www.gnupg.org/gph/en/manual.html#AEN136
> 
> "The document is compressed before being signed, and the output is in
> binary format."
> 
> This means that the output file doc.sig is compressed and signed.
> This does _NOT_ mean it is encrypted...correct?

Correct.

> --sign does not sign and encrypt, right?

Right.  You do '--sign --encrypt' to sign and encrypt.

> Also, what is the compression method?

It depends on your configuration, but by default it's the ZIP
algorithm.

David



More information about the Gnupg-users mailing list