Is the signature encrypted

vedaal at nym.hush.com vedaal at nym.hush.com
Mon Nov 5 17:44:47 CET 2012


On Monday, November 05, 2012 at 9:44 AM, "David Shaw" <dshaw at jabberwocky.com> wrote:

> the built in "--sign --encrypt" in GPG is:
>
>   encrypt ( compress ( sign ( data ) ) )

=====

Then, is there any way to tell if it is signed or not, without decrypting it?

(other than the fact that the signed and encrypted text is noticeably larger, 

which can be worked around by the user by making the message wordier,  
if the user, for whatever reason, wanted to conceal that the message wasn't signed.)

tia,

vedaal




More information about the Gnupg-users mailing list