On 7/7/2014 at 10:42 AM, "Walter Lange" <tr...@gmx.org> wrote:

>I would like to encrypt a signed (with ASCII armor) text. It 
>should take
>two steps, because I want to use two different machines, a local 
>one to
>sign and a remote machine which encrypts. The result should be the 
>same
>as the encrypted and signed one in one step. Is that possible?

=====

Not the way you want it.

It will have the same end result, in that the signature can be verified, on the 
same text,
and the decryption will show the text and verify the signature,

But in the case where it is a one step process, the decrypted plaintext will 
not have the signature as part of the text.

The other way is possible.

It is possible to encrypt and sign as one step, and then armor the signature 
and attach it to the decrypted plaintext to make it look like it was first 
clearsigned, or armored signed, and then encrypted.

The problem with doing it the way you want, is that while it is possible to 
remove the signature and save it as a detached signature,
it is not (afaik) possible to bind that detached signature to the plaintext and 
have it encrypted as one process. I would need to be zipped together or 
otherwise connected first.


vedaal


_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to