Many more sigs show when I add --with-colons to --list-sigs

Robert J. Hansen rjh at sixdemonbag.org
Wed Jul 29 16:47:09 CEST 2026


> Thanks. I guess this helps explain why some of the signatures listed
> by --check-sigs as usable were dsa1024, while others were unusable. My
> dsa1024 signature is listed as usable on other people's keys, so I
> guess that means my key doesn't use SHA-1?

Your certificate doesn't have a single RIPEMD160 signature on it.

Let's look at the machine-readable signature line:

sig:?::17:DBC3EBFC33E3FE56:995424332::::[User ID not found]:10x:::::2:

That next-to-final field, the '2', represents the hash algorithm used in
the signature. 2 corresponds to SHA-1. RIPEMD160 corresponds to 3.

You don't have a single signature line with a 3 in that field.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20260729/957e16dc/attachment-0001.sig>


More information about the Gnupg-users mailing list