ietf-openpgp
[Top] [All Lists]

Re: Multiple signatures over a document

2006-10-11 13:10:36

I cannot resolve, how to correctly calculate multiple signatures over
the document. I'm hashing entire document body + beginning of
signature (as described in 2440), and everything is ok.
But, when I'm producing two old-style signatures :
1) GnuPG checks only the first one, and says that it's ok
2) PGP 8.1 checks both, but says that first one is invalid, and the
second is ok

Producing two new-style signatures (with one-pass signature packets),
getting :
1) GnuPG checks both, and says that they're correct.
2) PGP 8.1 checks both, and says that first is invalid, and second one
is valid.

It seems, that PGP calculates the signature over the whole document +
bodies of other signatures.

But from 2440 it seems, that signed hash must not include other
signatures.

Please, anybody can clearly describe, what behavior is correct?

And, maybe, such situation must be described in 2440?

Could you provide a sample document to show the issue?

        Jon