Re: Many more sigs show when I add --with-colons to --list-sigs

Walt Mankowski via Gnupg-users <[email protected]> Wed, 29 Jul 2026 10:06:01 -0400
Newsgroups gmane.comp.encryption.gpg.user
Message-ID <[email protected]>
--===============8684940394126943544==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="bfLkiaZMIXxVZ//H"
Content-Disposition: inline


--bfLkiaZMIXxVZ//H
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 29, 2026 at 09:09:34AM -0400, Robert J. Hansen via Gnupg-users =
wrote:
> > Thanks for the clarification. Are dsa1024 signatures also SHA-1
> > signatures?
> The short answer is "not necessarily, but very much usually".
>=20
> DSA involves doing some complicated math on a 160-bit value. There's no
> hard requirement the value be generated by SHA-1, and GnuPG/PGP 5+
> provides RIPEMD160 as an alternative, but in reality hardly anyone uses
> RIPEMD160.

Thanks. I guess this helps explain why some of the signatures listed
by --check-sigs as usable were dsa1024, while others were unusable. My
dsa1024 signature is listed as usable on other people's keys, so I
guess that means my key doesn't use SHA-1?

Walt

--bfLkiaZMIXxVZ//H
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=acZc
-----END PGP SIGNATURE-----

--bfLkiaZMIXxVZ//H--


--===============8684940394126943544==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

--===============8684940394126943544==--