Many more sigs show when I add --with-colons to --list-sigs
Robert J. Hansen
rjh at sixdemonbag.org
Wed Jul 29 16:47:09 CEST 2026
> Thanks. I guess this helps explain why some of the signatures listed
> by --check-sigs as usable were dsa1024, while others were unusable. My
> dsa1024 signature is listed as usable on other people's keys, so I
> guess that means my key doesn't use SHA-1?
Your certificate doesn't have a single RIPEMD160 signature on it.
Let's look at the machine-readable signature line:
sig:?::17:DBC3EBFC33E3FE56:995424332::::[User ID not found]:10x:::::2:
That next-to-final field, the '2', represents the hash algorithm used in
the signature. 2 corresponds to SHA-1. RIPEMD160 corresponds to 3.
You don't have a single signature line with a 3 in that field.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20260729/957e16dc/attachment-0001.sig>
More information about the Gnupg-users
mailing list