On 5/2/2013 12:48 AM, Robert J. Hansen wrote: > She cares what the collision is: it has to be a valid OpenPGP signature > sequence. Erf, did I really write that? s/signature/User ID The point being the User ID isn't allowed to be completely arbitrary: there's a lot of structure to it. I think that's what kicks this into a preimage.