[openpgp] Re: Key Flags subpacket interpretation question

Hi, Wyllys!

> On 6 Nov 2025, at 22:29, Wyllys Ingersoll <[email protected]> wrote:
> 
> The subkey signature says 1 thing but the UID signature says another.  What is the correct logic that dictates whether or not the key can be used for encryption (or vice-versa, signing)?

For v4 keys, the key flags subpacket in the most recent self-certification over the primary userid apply only to the primary key. For v6 keys it is the most recent direct key signature that contains the primary key’s flags.

The key flags on the subkey binding signature apply to that particular subkey, for all versions.

Hope that helps,
A
_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]