On Sat, Oct 25, 2025 at 06:52:24PM -0500, Tennyson T Bardwell via Gnupg-users wrote: [...] > I think that I misunderstood the gaps between integrity, authentication, > and signing (tamper-detection vs knowledge of some key vs > non-repudiation).
I think that this is a lot simpler than you are assuming. You get authentication and integrity from signing the message/file. You just get integrity from things like OCFB-MDC (SEIP). The stuff about authenticated encryption is just a figure of speech in this case. Does my article help? https://articles.59.ca/doku.php?id=pgpfan:pgpauth Bruce _______________________________________________ Gnupg-users mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-users
