Occasional invalid RSA signature under repeated signing (gpg 2.3.7 / libgcrypt 1.10.1)
Diggory Blake via Gnupg-devel <[email protected]> Tue, 7 Jul 2026 18:03:19 +0100
| Newsgroups | gmane.comp.encryption.gpg.devel |
|---|---|
| Message-ID | <CAAnrWj_XDheORodZhju-mk1FQSsf4pMJ9ac35Hz4R3p_LNH6Pw@mail.gmail.com> |
SGkgYWxsIOKAlCBJIGhpdCBhbiBvZGQgc2lnbmluZyBmYWlsdXJlIGFuZCBkaWQgZW5vdWdoIGRp Z2dpbmcgdGhhdCBJCnRob3VnaHQgaXQgd2FzIHdvcnRoIHdyaXRpbmcgdXAgaW4gY2FzZSBpdCdz IHVzZWZ1bC4gSGFwcHkgdG8gYmUgdG9sZAp0aGlzIGlzIGFscmVhZHkga25vd24sIG9yIHRoYXQg SSdtIGJhcmtpbmcgdXAgdGhlIHdyb25nIHRyZWUuCgojIyBXaGF0IGhhcHBlbmVkCgpJIHNpZ25l ZCBhIGdpdCBjb21taXQgd2l0aCBgZ2l0IGNvbW1pdCAtLWFtZW5kIC0tbm8tZWRpdGAgKHdoaWNo IGNhbGxzCmBncGcgLWJzYXUgPEtFWT5gIHVuZGVyIHRoZSBob29kKSwgYW5kIGxhdGVyIG5vdGlj ZWQgYGdpdCB2ZXJpZnktY29tbWl0YApyZXBvcnRzIGl0IGFzIGBCQUQgc2lnbmF0dXJlYC4gVGhl IGtleSBpcyB0aGUgcmlnaHQgb25lLCBhbmQgZXZlcnkKb3RoZXIgY29tbWl0IEkndmUgc2lnbmVk IGFyb3VuZCB0aGF0IHRpbWUgdmVyaWZpZXMgZmluZSDigJQgb25seSB0aGlzIG9uZQppcyBicm9r ZW4uCgpXaGVuIEkgZHVnIGludG8gaXQsIGBncGcgLS1kZWJ1ZyA0IC0tdmVyaWZ5YCBzaG93cyB0 aGUgc2lnbmF0dXJlIGlzCndlbGwtZm9ybWVkIGJ1dCBgc15lIG1vZCBuYCBkb2Vzbid0IG1hdGNo IHRoZSBQS0NTIzEgdjEuNS1wYWRkZWQKZXhwZWN0ZWQgdmFsdWUuIFJlLXNpZ25pbmcgdGhlIHNh bWUgYnl0ZXMgd2l0aCB0aGUgc2FtZSBncGcgaW1tZWRpYXRlbHkKYWZ0ZXIgcHJvZHVjZXMgYSBn b29kIHNpZ25hdHVyZSwgc28gaXQgd2FzIGEgb25lLW9mZi4gSWYgaXQgd2VyZSBqdXN0CnRoYXQg SSdkIGhhdmUgc2hydWdnZWQgYW5kIG1vdmVkIG9uLCBidXQgdGhlIHNoYXBlIG9mIGBjbXBgIHR1 cm5lZCBvdXQKdG8gYmUgcHJldHR5IHNwZWNpZmljLgoKIyMgRW52aXJvbm1lbnQKCi0gV2luZG93 cyAxMCBQcm8gMjJIMgotIGdwZyAoR251UEcpIDIuMy43ICh0aGUgc3RhbmRhbG9uZSBpbnN0YWxs ZXIgZnJvbSBnbnVwZy5vcmcsIG5vdCB0aGUKICBvbmUgYnVuZGxlZCB3aXRoIEdpdCBmb3IgV2lu ZG93cykKLSBsaWJnY3J5cHQgMS4xMC4xCi0gUlNBLTQwOTYga2V5LCBTSEEtMjU2IHNpZ25hdHVy ZXMKLSBObyBjdXN0b20gYGdwZy1hZ2VudC5jb25mYCwgZGVmYXVsdHMgdGhyb3VnaG91dAoKIyMg VGhlIHNpZ25hdHVyZSB0aGF0IGZhaWxlZAoKQ29tcGFyaW5nIHdoYXQgZ3BnIGNvbXB1dGVkIHRo ZSBleHBlY3RlZCBwYWRkZWQgdmFsdWUgc2hvdWxkIGJlIGFnYWluc3QKd2hhdCBpdCBnb3QgZnJv bSBgc15lIG1vZCBuYDoKCmBgYApkYXRhOiAgMDFmZuKApmZmMDAzMDMxMzAwZDA2MDk2MDg2NDgw MTY1MDMwNDAyMDEwNTAwMDQyMDBjOGQ1OGQ3NDXigKZhZDM0MDkKIChleHBlY3RlZCkKY21wIDog IGEwZWQyYzBjYTNhMzQwMTYyOGIzZWIzNDM2ODg1YTE5OTJiNTUxYzU4OTE3NmVmMGFkZGRmY2Nl YTE3YWVmMjQKICAgICAgIGFkNmU3NmRmNjE3YmY5ZTRlNWE2ZWNmNDU1ZmViMGNiOTM5MDMwNDAy YjllOTg2ZTM3YjIyNDM0MzEwNzBjN2UKICAgICAgIGY4NmExYjNlMWVlOThkYTUxZDgyNTBiZDIx NTI3NGQ5OGVjM2VjMzI5OTMwYjY1ODgwYzJiNGMzZjdkYjg1NTkKICAgICAgIOKApiAobWF0Y2hl cyBuIGJ5dGV3aXNlIGZvciB+NDgwIGJ5dGVzIHdpdGggYnl0ZSAxIG9mZnNldCBieSDiiJIyKSDi gKYKICAgICAgIDwzMi1ieXRlIHRhaWwgdmFyaWVzIHBlciBmYWlsdXJlPgpgYGAKClRoZSBwdWJs aWMgbW9kdWx1cyBzdGFydHM6CgpgYGAKbjogICAgIGEwZWYyYzBjYTNhMzQwMTYyOGIzZWIzNDM2 ODg1YTE5OTJiNTUxYzU4OTE3NmVmMGFkZGRmY2NlYTE3YWVmMjQKICAgICAgIGFkNmU3NmRmNjE3 YmY5ZTRlNWE2ZWNmNDU1ZmViMGNiOTM5MDMwNDAyYjllOTg2ZTM3YjIyNDM0MzEwNzBjN2UKICAg ICAgIOKApgpgYGAKCkJ5dGUgMSBvZiBgY21wYCBpcyBgMHhlZGAsIGJ5dGUgMSBvZiBgbmAgaXMg YDB4ZWZgLCBzbyBgY21wYCBsb29rcyBsaWtlCmBuIOKIkiAyXjQwODFgIGluIHRoZSBoaWdoIGhh bGYuIE1pZGRsZSA0NjArIGJ5dGVzIG1hdGNoIGBuYCBleGFjdGx5LgpPbmx5IHRoZSBsYXN0IDMy IGJ5dGVzIGRpZmZlciBmcm9tIGEgc3RyYWlnaHQgY29weSBvZiBgbmAuCgpJIGNoZWNrZWQgKHdp dGggYW4gaW5kZXBlbmRlbnQgQmlnSW50IHJlaW1wbGVtZW50YXRpb24pIHRoYXQgdGhpcyBpcwp0 aGUgYWN0dWFsIGBzXmUgbW9kIG5gLCBub3QganVzdCBzb21ldGhpbmcgbGliZ2NyeXB0J3MgZGVi dWcgcHJpbnRlcgp3YXMgc2hvd2luZyBtZSDigJQgc2FtZSByZXN1bHQuCgojIyBSZXByb2R1Y2Vy CgpJIHdvbmRlcmVkIGhvdyByYXJlIHRoaXMgYWN0dWFsbHkgd2FzLCBzbyBJIHdyb3RlIGEgc21h bGwgc3RyZXNzCmhhcm5lc3Mg4oCUIGEgTm9kZSBzY3JpcHQgdGhhdCBsb29wcyBgZ3BnIC1ic2F1 IDxLRVk+YCBvbiBhIGZpeGVkIDEzMDUtYnl0ZQpwYXlsb2FkIGFuZCB2ZXJpZmllcyBlYWNoIHNp Z25hdHVyZS4gUm91Z2ggaGl0IHJhdGVzOgoKLSBTZXF1ZW50aWFsICgxIHNpZ24gYXQgYSB0aW1l KTogKioxIEJBRFNJRyBpbiA1MDAqKgotIDUtd2F5IGNvbmN1cnJlbnQ6ICoqMSBCQURTSUcgaW4g fjEwMOKAkzIwMCoqCgpTbyBjb25jdXJyZW5jeSBpc24ndCBuZWNlc3Nhcnkg4oCUIGl0IGp1c3Qg bWFrZXMgaXQgZmFzdGVyIHRvIHJlcHJvZHVjZS4KCkkgY29sbGVjdGVkIHR3byBtb3JlIEJBRFNJ R3MgdGhpcyB3YXkuIEJvdGggaGF2ZSB0aGUgc2FtZSBzaGFwZSBhcyB0aGUKb3JpZ2luYWw6IHRo ZSBmaXJzdCA0ODAgYnl0ZXMgb2YgYHNeZSBtb2QgbmAgYXJlIGJ5dGUtZm9yLWJ5dGUgaWRlbnRp Y2FsCnRvIHRoZSBvcmlnaW5hbCBmYWlsdXJlIChgYTBlZDJjMGNhM2EzNDAxNjI4YjNlYuKApmAp LCBhbmQgb25seSB0aGUKdHJhaWxpbmcgMzIgYnl0ZXMgdmFyeS4gVGhyZWUgaW5kZXBlbmRlbnQg ZmFpbHVyZXMgYWdyZWVpbmcgdG8gdGhhdApleHRlbnQgZG9lc24ndCBsb29rIGxpa2UgcmFuZG9t IG1lbW9yeSBub2lzZTsgaXQgbG9va3MgbGlrZSBhIHNwZWNpZmljCmludGVybWVkaWF0ZSB2YWx1 ZSBpcyBsZWFraW5nIHRocm91Z2guCgojIyBGYXVsdC1hdHRhY2sgc2FmZXR5CgpCZWZvcmUgc2hh cmluZyBmYWlsaW5nIHNpZ25hdHVyZXMgSSBjaGVja2VkIHRoZXkgZG9uJ3QgZW5hYmxlIGEKQmVs bGNvcmUtc3R5bGUgQ1JUIGZhdWx0IGF0dGFjay4gRm9yIGVhY2ggZmFpbHVyZToKCmBgYApnY2Qo fHNeZSBtb2QgbiDiiJIgUEtDUzFfcGFkKGhhc2gpfCwgbikgPSAxCmBgYAoKc28gdGhlIGNvcnJ1 cHRpb24gYWZmZWN0cyBib3RoIENSVCBicmFuY2hlcyAobW9kIHAgKmFuZCogbW9kIHEpCmNvaGVy ZW50bHksIG5vdCBvbmUgYnJhbmNoIG9ubHkuIFRoZSBwcml2YXRlIGtleSBpc24ndCByZWNvdmVy YWJsZQpmcm9tIHRoZXNlIHNpZ25hdHVyZXMuCgpUaGF0J3MgYWxzbyBhbiBpbnRlcmVzdGluZyBk YXRhIHBvaW50IGFib3V0IHRoZSBtZWNoYW5pc20sIEkgdGhpbmsg4oCUCml0J3Mgbm90IGEgZmF1 bHQgaW4gb25lIGV4cG9uZW50aWF0aW9uIGJ1dCBzb21ldGhpbmcgdGhhdCBzdXJ2aXZlcwpDUlQg cmVjb21iaW5hdGlvbi4KCiMjIFRoaW5ncyBJIHJ1bGVkIG91dAoKLSAqKlJhY2UgY29uZGl0aW9u Kiog4oCUIHNlcXVlbnRpYWwgcmVwcm9kdWNlcyBhdCAxLzUwMAotICoqZ2l0IOKGkiBvYmplY3Qg Y29ycnVwdGlvbioqIOKAlCBiYXNlNjQgQ1JDLTI0IHZlcmlmaWVzIG92ZXIgdGhlIHNpZwogIHBh Y2tldDsgZ2l0IHdyaXRlcyBleGFjdGx5IHdoYXQgZ3BnIHJldHVybmVkCi0gKipXcm9uZyBwYXls b2FkIC8gZW5jb2RpbmcqKiDigJQgdGhlIExFRlQxNiBmaWVsZCBpbiB0aGUgc2lnIHBhY2tldAog IG1hdGNoZXMgdGhlIFNIQS0yNTYgcHJlZml4IG9mIHRoZSBleGFjdCBieXRlcyBnaXQgcHJlc2Vu dHMgdG8gZ3BnLAogIGFuZCBJIGJydXRlLWZvcmNlZCB+dGhvdXNhbmRzIG9mIG5lYXJieSBwYXls b2FkIHZhcmlhbnRzIChDUkxGLCBCT00sCiAgZW5jb2RpbmcgaGVhZGVyLCB0aW1lc3RhbXAgc3dl ZXBzLCBldmVyeSB0cmVlIGhhc2ggaW4gdGhlIHJlcG8pIOKAlAogIG5vbmUgdmVyaWZ5Ci0gKipX cm9uZyBrZXkqKiDigJQgaXNzdWVyIGZpbmdlcnByaW50IGlzIGNvcnJlY3QKLSAqKlRyYW5zaWVu dCBiYWQgc3RhdGUqKiDigJQgcmUtc2lnbmluZyB0aGUgc2FtZSBieXRlcyBtb21lbnRzIGxhdGVy CiAgc3VjY2VlZHMKCiMjIFdoZXJlIEkgZ290IHRvIG9uIHRoZSBtZWNoYW5pc20KCkkgcmVhZCBz b21lIG9mIGBsaWJnY3J5cHQtMS4xMC4xL21waS9tcGktcG93LmNgLCBgbXBpL21waXV0aWwuY2As IGFuZApgY2lwaGVyL3JzYS5jYCwgYnV0IEkgZGlkbid0IG1hbmFnZSB0byBwaW4gZG93biB0aGUg c3BlY2lmaWMgbGluZS4KVGhlIGNhbmRpZGF0ZXMgSSBub3RpY2VkIChtYXkgYmUgd3JvbmcpOgoK LSBgX2djcnlfbXBpX3Bvd21gJ3MgVz09MSBicmFuY2ggc2tpcHMgdGhlIGBNUE5fWkVSTyhycCwg cnNpemUpYCB0aGUKICBXPjEgYnJhbmNoIGRvZXMgKHRob3VnaCBJJ20gbm90IHN1cmUgVz09MSBp cyBldmVuIHJlYWNoZWQgZm9yCiAgUlNBLTQwOTYgc2lnbikKLSBgX2djcnlfbXBpX2FsbG9jX2xp bWJfc3BhY2VgIGRvZXNuJ3QgemVybyB0aGUgYnVmZmVyIGV4Y2VwdCBpbiB0aGUKICBgbmxpbWJz PT0wYCBjYXNlCi0gYHNlY3JldF9jb3JlX2NydGAncyBvdXRwdXQgTVBJIG1pZ2h0IHJldXNlIGxp bWJzIGZyb20gYSBwcmV2aW91cwogIG9wZXJhdGlvbiB3aG9zZSBjb250ZW50cyBoYXBwZW5lZCB0 byBiZSBzaGFwZWQgbGlrZSBgbmAKClRoZSBmYWN0IHRoYXQgYHNeZSBtb2QgbmAgaXMgKmRldGVy bWluaXN0aWMqIGFjcm9zcyBmYWlsdXJlcyBleGNlcHQgZm9yCjMyIGJ5dGVzIGF0IHRoZSB0YWls IHN1Z2dlc3RzIHNvbWV0aGluZyBpbiB0aGUgYmxpbmRpbmcgaW50ZXJtZWRpYXRlCnBhdGgsIHNp bmNlIHRoZSBibGluZGluZyBmYWN0b3IgYHJgIGlzIHRoZSBvbmx5IGZyZXNoIGlucHV0IHBlciBz aWduLgpsaWJnY3J5cHQgMS4xMSByZXdyb3RlIHRoZSBtb2RleHAgYXMgYF9nY3J5X21waWhfcG93 bV9sbGlgIHdoaWNoIG1pZ2h0CmFscmVhZHkgaGF2ZSBhZGRyZXNzZWQgdGhpcyBjbGFzcyBvZiBi dWcg4oCUIEkgaGF2ZW4ndCB0ZXN0ZWQgdGhhdCB5ZXQuCgojIyBBdHRhY2htZW50cwoKRmlsZXMg aW4gdGhpcyBnaXN0OgpodHRwczovL2dpc3QuZ2l0aHViLmNvbS9EaWdnc2V5L2FjOTIzMjQ4NmM3 MzQ3ZjYwZGM3Nzk3MDUyMWVjMGJkCgotIGBiYWQucGF5bG9hZC5iaW5gIOKAlCB0aGUgZXhhY3Qg MTMwNS1ieXRlIHBheWxvYWQKLSBgYmFkX29yaWdpbmFsLmFzY2AsIGBiYWRfY29uY3VycmVudC5h c2NgLCBgYmFkX3NlcXVlbnRpYWwuYXNjYCDigJQgdGhyZWUKICBmYWlsaW5nIHNpZ25hdHVyZXMg KG9uZSBmcm9tIHRoZSBvcmlnaW5hbCBnaXQgY29tbWl0LCB0d28gZnJvbSB0aGUKICBzdHJlc3Mg cmVwcm9kdWNlcikKLSBgc3RyZXNzLmpzYCDigJQgdGhlIHJlcHJvZHVjZXIgKH45MCBsaW5lcyBv ZiBOb2RlKQotIGBkZWNvZGUtc2lncy5qc2Ag4oCUIHRoZSBpbmRlcGVuZGVudCBCaWdJbnQgdmVy aWZpZXIgdGhhdCBhbHNvIGRvZXMgdGhlCiAgQmVsbGNvcmUtc2FmZXR5IGBnY2RgIGNoZWNrCgpU aGFua3MgZm9yIHRha2luZyBhIGxvb2ssIGFuZCBhcG9sb2dpZXMgaWYgdGhpcyB0dXJucyBvdXQg dG8gYWxyZWFkeQpiZSBmaXhlZCBpbiBhIHZlcnNpb24gSSBoYXZlbid0IHRlc3RlZC4KCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCkdudXBnLWRldmVsIG1h aWxpbmcgbGlzdApHbnVwZy1kZXZlbEBnbnVwZy5vcmcKaHR0cHM6Ly9saXN0cy5nbnVwZy5vcmcv bWFpbG1hbi9saXN0aW5mby9nbnVwZy1kZXZlbAo=