Hi!
I cannot resolve, how to correctly calculate multiple
signatures over
the document. I'm hashing entire document body + beginning
of
signature (as described in 2440), and everything is ok.
But, when I'm producing two old-style signatures :
1) GnuPG checks only the first one, and says that it's ok
2) PGP 8.1 checks both, but says that first one is invalid,
and the
second is ok
Producing two new-style signatures (with one-pass signature
packets),
getting :
1) GnuPG checks both, and says that they're correct.
2) PGP 8.1 checks both, and says that first is invalid, and
second one
is valid.
It seems, that PGP calculates the signature over the whole
document +
bodies of other signatures.
But from 2440 it seems, that signed hash must not include
other
signatures.
Please, anybody can clearly describe, what behavior is
correct?
And, maybe, such situation must be described in 2440?
--
Best regards,Nickolay mailto:<ni4 ukr.net>
|