mirror of
https://codeberg.org/openpgp/notes.git
synced 2025-03-28 03:33:14 +01:00
edit encryption subkey
This commit is contained in:
parent
c8b417ccdb
commit
1f8411caa6
1 changed files with 6 additions and 7 deletions
|
@ -345,27 +345,26 @@ The signature's hash is calculated over the following data (see [Computing Signa
|
|||
- serialized primary key's public data
|
||||
- serialized direct key signature packet (excluding the unhashed area)
|
||||
|
||||
|
||||
(zoom_enc_subkey)=
|
||||
## Encryption subkey
|
||||
|
||||
Now we'll look at a subkey in Alice's certificate. An OpenPGP subkey, when it is linked to an OpenPGP certificate (via its primary key), consists of two elements:
|
||||
Let's now look at a subkey in Alice's OpenPGP certificate. A subkey, when linked to an OpenPGP certificate via its primary key, consists of two elements:
|
||||
|
||||
- a key packet that contains the component key itself, and
|
||||
- a signature packet that links this component key to the primary key (and thus implicitly to the full OpenPGP certificate).
|
||||
- a signature packet that links this component key to the primary key and, implicitly, to the full OpenPGP certificate.
|
||||
|
||||
In this section, we'll use the files that contain individual packets of Alice's certificate, which we split apart above. In this split representation of Alice's certificate, the encryption subkey happens to be stored in `alice.pub-4--PublicSubkey`, and the associated binding self-signature for the subkey in `alice.pub-5--Signature`.
|
||||
We will use the files containing individual packets of Alice's certificate, which we separated above. In this split representation, the encryption subkey is stored in `alice.pub-4--PublicSubkey`, while the associated binding self-signature is stored in `alice.pub-5--Signature`.
|
||||
|
||||
````{note}
|
||||
It's common to look at a packet dump for a full OpenPGP certificate, like this:
|
||||
It's common to look at a packet dump for a full OpenPGP certificate as shown below:
|
||||
|
||||
```text
|
||||
$ sq packet dump --hex alice.pub
|
||||
```
|
||||
|
||||
That command shows the details for the full series of packets in an OpenPGP certificate (recall the list of [packets of Alice's certificate](split_alice)). Finding a particular packet in that list can take a bit of focus and practice though.
|
||||
This command shows the details for the full series of packets in an OpenPGP certificate (refer to the list of [packets of Alice's certificate](split_alice)). Finding a particular packet in that list can take a bit of focus and practice though.
|
||||
|
||||
In the following sections we're making it a bit easier for ourselves, and directly look at individual packets, from the files we created with `sq packet split`, above.
|
||||
In the following sections,we make it easier for ourselves by directly examining individual packets from the files we created with `sq packet split` above.
|
||||
````
|
||||
|
||||
### Public-Subkey packet
|
||||
|
|
Loading…
Add table
Reference in a new issue