<html style="direction: ltr;">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body bidimailui-charset-is-forced="true" style="">
<br>
<div class="moz-cite-prefix">On 1/14/2021 10:37 AM,
<a class="moz-txt-link-abbreviated" href="mailto:vedaal@nym.hush.com">vedaal@nym.hush.com</a> wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20210114183738.1436F805142@smtp.hushmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<span style="font-family: Arial; font-size: 14px; line-height:
150%;">On 1/14/2021 at 4:47 AM, "Ayoub Misherghi via
Gnupg-users" <a class="moz-txt-link-rfc2396E" href="mailto:gnupg-users@gnupg.org"><gnupg-users@gnupg.org></a> wrote:
<blockquote style="border-left:solid 1px
#ccc;margin-left:10px;padding-left:10px;">
<div>
<style id="bidiui-paragraph-margins" type="text/css">body p {
margin-bottom:0;
margin-top:0;
}</style> </div>
<div style="direction:ltr;">
<p><br>
</p>
<p>I am encrypting and signing documents with myself as the
receiver. Nobody else will want to look inside them. Is it
possible to add encrypted comments or other information to
a separated signature file; and later retrieve this
additional information? I want to be able to decrypt the
signature file alone and retrieve all the information I
put inside it.<br>
</p>
<p><br>
</p>
<p>=====</p>
<p>Not exactly, </p>
<p>but functionally, yes, it can be done.</p>
<p><br>
</p>
<p>[1] Armor the signature file ( gpg --armor
filename.sig ) this outputs to filename.sig.asc</p>
<p><br>
</p>
<p>[2[ Armor your encrypted comments, and copy them to the
end of the filename.sig.asc,</p>
<p>(leave one blank line between the pgp footer of the
signature file, and the pgp header of the encrypted file)</p>
<p><br>
</p>
<p>[3] Save the whole thing as filename.sig.asc</p>
<p><br>
</p>
<p>[4] gpg filename.sig,asc will automatically verify the
sig if the original signed file 'filename' is present, and
also decrypt the added comments</p>
<p><br>
</p>
<p>vedaal</p>
</div>
</blockquote>
</span></blockquote>
<p>=====</p>
<p>I have the concern that if this is not part of GPG, future
versions of GPG may not allow it; leaving me in the lurch.</p>
<p><br>
</p>
<p>I have these questions:</p>
<p>[Q1] Does this mean "filename.sig.asc" will still be decrypted if
"filename" is not present?<br>
</p>
<p>[Q2] Is there a reason why the functionality is missing from GPG?</p>
<p>[Q3] The references I find on the internet are directed at users
of GPG and not </p>
<p>developers of applications of GPG, can you please direct me to
references that </p>
<p>show me things like the format of the signature file, armor and
not?</p>
<p><br>
</p>
<p>Thanks,<br>
</p>
<p>Ayoub</p>
<p><br>
</p>
</body>
</html>