Are DSA2 signing keys backwards compatible?

David Shaw dshaw at jabberwocky.com
Mon Feb 11 04:10:59 CET 2008


On Sun, Feb 10, 2008 at 10:01:42PM -0500, David Shaw wrote:
> On Sun, Feb 10, 2008 at 08:30:24PM -0600, Kevin Hilton wrote:
> > Just to clarify for some other users,
> > 
> > What version of GnuPG were the DSA2 keys (or longer DSA signing keys)
> > and the additional SHA hashes introduced?
> 
> They were not introduced at the same time.  As you said in your
> earlier mail, DSA2 was introduced in 1.4.8.  The new SHA hashes were
> introduced in the 1.3.x development series.  All 1.4 and later GPGs
> (including the 2.x series) have them.

I should clarify this.  DSA2 was enabled as part of standard OpenPGP
in 1.4.8.  We knew it was coming, though, so it exists as far back as
1.4.4 (June 2006).

David



More information about the Gnupg-users mailing list