P and Q in RSA (was: Bad signatures issued on macOS)

Hello,

I created a ticket for this interoperability problem:

	https://dev.gnupg.org/T8171

And I put my proposal patch of GnuPG.  (It's not only P and Q, but the
value of U should be also updated.)

I'd like to express my gratitude to you and John Soo.  Without the
report and help, we were not able to know the problem.


Also, let me address a correction in my statements.

To John Soo, I wrote on February 13th:
> According to the other part of the log, it is your RSA public raw
> material of your primary key 1510C86404E2F6ECA02871DB6E628CC4145FD2ED.
> 
> The problem here is that: the subkey
> 1B7E30E28F43D2F9469CF62AB67EB1E57374A315 was retrieved correctly, but
> the key used for verification was
> 1510C86404E2F6ECA02871DB6E628CC4145FD2ED for some reason.

This analysis of mine was wrong.  I had thought that it was verification
of binding signature, but it must be verification of backsig actually.
--