ietf-openpgp
[Top] [All Lists]

Re: More questions and comments on rfc2440bis-12

2005-02-25 09:27:26

On Wed, Feb 23, 2005 at 11:37:19AM +0000, Ben Laurie wrote:

In 5.2.1:

"0x10: Generic certification of a User ID and Public Key packet."

Does this mean that the signature is over the User ID packet and the 
Public Key packet, concatenated, in that order? Or what?

5.2.1 is just an overview.  The nitty-gritty on how to make each type
is specified in 5.2.4. Computing Signatures.

Also, what on earth does:

       Note that all PGP "key signatures" are this type of
       certification.

PGP doesn't generate 0x11, 0x12, or 0x13 signatures, and when it
encounters them treats them all as if they were 0x10.

By default GnuPG generates 0x10, but the user can request another
type.  Also by default GnuPG ignores 0x11 signatures completely, but
treats treats 0x12 and 0x13 the same as 0x10.

David