x488 vs all other : keyid flip

Werner Koch wk at gnupg.org
Thu Mar 28 10:47:38 CET 2024

On Thu, 28 Mar 2024 00:49, Christian Sommer said:

> on the other hand a x488 fingerprint is 50 hex characters long. let's say
> it's 11111 22222 33333 44444 00000 00000 AAAAA BBBBB CCCCC DDDDD then its
> long keyid is 11111 22222 33333 4 and its short keyid is 22 33333 4.

x448 keys are created as version 5 keys and version 5 keys come with a
32 byte fingerprint (v4 has 20 bytes).  Also the way the keyid is
computed has changed: For v5 keys the keyid are the left most 32 or 64

For display purposes an abbreviated hex format is used.  It might be
that the keyid is then display wrongly - frankly I have not checked
because keyids are rarely used.  Even the formatted fingerprint ("gpg
--fingerprint") is not very useful anymore because the majority of users
just copy+paste the fingerprint and thus the straight hex format as
displayed by "gpg -k" is more useful.  Here is an example:

pub   ed25519 2016-02-02 [SC]
uid           [ unknown] chicago <test at example.net>
sub   cv25519 2016-02-02 [E]
sub   cv448 2024-03-27 [E]

where a v5 subkey has been added.  Note also that I use the
--with-subkey-fongerprint option which will eventually be the default.



The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 247 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20240328/b2024eb5/attachment.sig>

More information about the Gnupg-users mailing list