[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gnupg-devel
Subject:    gpg 1.4.x and 2.0.x differ in output with --with-colons --check-sigs
From:       Daniel Kahn Gillmor <dkg () fifthhorseman ! net>
Date:       2013-07-12 15:49:00
Message-ID: 87bo67dbir.fsf () alice ! fifthhorseman ! net
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


Hi GnuPG folks--

It looks to me like gpg and gpg2 differ in output when using
--with-colons --check-sigs:

0 dkg@alice:~$ diff -u <(gpg --check-sigs --with-colons ssh://che.mayfirst.org) \
                <(gpg2 --check-sigs --with-colons ssh://che.mayfirst.org)
--- /dev/fd/63	2013-07-12 11:38:20.492341784 -0400
+++ /dev/fd/62	2013-07-12 11:38:20.492341784 -0400
@@ -1,5 +1,5 @@
 tru::1:1373556281:1373770620:3:1:5
 pub:f:2048:1:6D55BC121C106C76:1267149023:::-:::caCA:
 uid:f::::1267149023::FA9BB45DEC38693028E39E41D8BDD5A9D6234406::ssh\x3a//che.mayfirst.org:
                
-sig:!::1:6D55BC121C106C76:1267149023::::ssh\x3a//che.mayfirst.org:13x:
-sig:!::1:CCD2ED94D21739E9:1267149081::::Daniel Kahn Gillmor \
<dkg@fifthhorseman.net>:10x: \
+sig:!::1:6D55BC121C106C76:1267149023::::ssh\x3a//che.mayfirst.org:13x:::::8: \
+sig:!::1:CCD2ED94D21739E9:1267149081::::Daniel Kahn Gillmor \
<dkg@fifthhorseman.net>:10x:::::10: 1 dkg@alice:~$ 


in particular, gpg 2.0.20 supplies field 16 for the sig lines, which
(according to DETAILS) is the hash algorithm of the signature, but gpg
1.4.12 does not.  (8 is SHA-256, 10 is SHA-512).  Is this an intentional
difference?

Is there any reason to avoid having 1.4.x produce this field as well?

Regards,

             --dkg


[Attachment #5 (application/pgp-signature)]

_______________________________________________
Gnupg-devel mailing list
Gnupg-devel@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-devel


[prev in list] [next in list] [prev in thread] [next in thread]