x488 vs all other : keyid flip

[Werner Koch]

On Thu, 28 Mar 2024 00:49, Christian Sommer said:

> on the other hand a x488 fingerprint is 50 hex characters long. let's say
> it's 11111 22222 33333 44444 00000 00000 AAAAA BBBBB CCCCC DDDDD then its
> long keyid is 11111 22222 33333 4 and its short keyid is 22 33333 4.

x448 keys are created as version 5 keys and version 5 keys come with a
32 byte fingerprint (v4 has 20 bytes).  Also the way the keyid is
computed has changed: For v5 keys the keyid are the left most 32 or 64
bits.

For display purposes an abbreviated hex format is used.  It might be
that the keyid is then display wrongly - frankly I have not checked
because keyids are rarely used.  Even the formatted fingerprint ("gpg
--fingerprint") is not very useful anymore because the majority of users
just copy+paste the fingerprint and thus the straight hex format as
displayed by "gpg -k" is more useful.  Here is an example:

pub   ed25519 2016-02-02 [SC]
      FD8FEC4F8595AB1B6F60D43FC2CED0800E50ACF1
uid           [ unknown] chicago <test at example.net>
sub   cv25519 2016-02-02 [E]
      532D5C7677B4D806B50B0E0F11E7BF9EE1034B1C
sub   cv448 2024-03-27 [E]
      FB6A3BC5EB92C8AA9F3807A9B4C79C38F16E9AA4CF9384B07485923574773DCF

where a v5 subkey has been added.  Note also that I use the
--with-subkey-fongerprint option which will eventually be the default.


Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 247 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20240328/b2024eb5/attachment.sig>