A person emailed me his PGP signature. When I compared it to the signature from the PGP server, it is much shorter not matching at all. I use the version 1.4.9.

  1. Why is the signature so short?
  2. Why does it not match the server?
  3. What is the signature of about 100 bits' encryption?

    -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (NetBSD)

    iD8DBQBKl0BmzbodwsP3RI0RAqQwAKCsP�覃ᝋꜴ鉰਍� 1TEDKNU8/04JTQRbHotaDd0= =Ju5N -----END PGP SIGNATURE-----

migrated from stackoverflow.com Aug 28 '09 at 21:02

This question came from our site for professional and enthusiast programmers.


I think you might be confusing the signature with the public key -- a PGP signature is typically at the bottom of the message it is attached to, and depends on the message and the keypair used to sign it. What you pull off the server is probably the public part of the user's keypair.

What I think you want is to verify the signature using GnuPG.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy