Many more sigs show when I add --with-colons to --list-sigs

Robert J. Hansen rjh at sixdemonbag.org
Wed Jul 29 15:09:34 CEST 2026


> Thanks for the clarification. Are dsa1024 signatures also SHA-1
> signatures?
The short answer is "not necessarily, but very much usually".

DSA involves doing some complicated math on a 160-bit value. There's no
hard requirement the value be generated by SHA-1, and GnuPG/PGP 5+
provides RIPEMD160 as an alternative, but in reality hardly anyone uses
RIPEMD160.

This should not be confused with DSS, the Digital Signature *Standard*,
which specifies DSA with SHA-1 (and only SHA-1).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20260729/fdeace2e/attachment.sig>


More information about the Gnupg-users mailing list