AFAIU signing in GnuPG is performed in two steps:
- Create a digest of the file.
- Encrypt the digest with the secret key.
Is there some way to actually split this into two steps on the command line?
The end-goal is to sign a file (detach-sign) with neither having to transfer it to the computer where the secret key is, nor transferring the secret key to where the file-to-be-signed is.