> Thanks. I guess this helps explain why some of the signatures listed > by --check-sigs as usable were dsa1024, while others were unusable. My > dsa1024 signature is listed as usable on other people's keys, so I > guess that means my key doesn't use SHA-1?
Your certificate doesn't have a single RIPEMD160 signature on it. Let's look at the machine-readable signature line: sig:?::17:DBC3EBFC33E3FE56:995424332::::[User ID not found]:10x:::::2: That next-to-final field, the '2', represents the hash algorithm used in the signature. 2 corresponds to SHA-1. RIPEMD160 corresponds to 3. You don't have a single signature line with a 3 in that field.
OpenPGP_signature.asc
Description: OpenPGP digital signature
_______________________________________________ Gnupg-users mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-users
