Re: PGP signature of empty string

Am 12.03.2013 um 14:56 schrieb Peter Gutmann <[email protected]>:

> Florian Mutter <[email protected]> writes:
> 
>> But I'm not able to get something like this working to sign an empty string.
> 
> Sure, because signing an empty string doesn't make sense.  See my earlier
> quoted text:
> 
>  No one uses XEP-0027 these days, they all use OTR. The PGP integration with
>  XMPP clients was an early experiment in the Jabber community before we even
>  called it XMPP. Think 13+ years ago. But clients never signed empty strings,
>  although we never fixed the spec because no one was using the technology.
>  I'll push to make the spec Obsolete.
> 
> This shouldn't have been in the spec in the first place, and the spec itself
> is obsolete.
> 
> Peter.

I did read your response but I did not get that signing the empty string is not allowed in general. Is gpg wrong when signing the empty string? There is a SHA1 hash for the empty string and from my limited knowledge of PGP I thought that was all that is needed to sign something. What if I want to sign an empty email (can this happen anyway?)?


_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.