* Daniel Kahn Gillmor:
Also, it's quite likely that i've missed things in my reading of the
spec. If anyone sees any other problematic areas, it would be great to
air them as soon as possible.
There's the issue of V3 keys.
If packet formats are changed once again, it could make sense to
incorporate random blobs near the start of the packets, so that an
attacker cannot predict the internal state of the hash function when a
signature is created. OpenPGP does not need the convergent property
of hash functions.