From 1f8411caa66d537a49efed7bfc88b9d93d458265 Mon Sep 17 00:00:00 2001 From: "Tammi L. Coles" <tlcoles@gmail.com> Date: Fri, 27 Oct 2023 14:17:25 +0200 Subject: [PATCH] edit encryption subkey --- book/source/17-zoom_certificates.md | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/book/source/17-zoom_certificates.md b/book/source/17-zoom_certificates.md index 9ba1c4a..68f1d3a 100644 --- a/book/source/17-zoom_certificates.md +++ b/book/source/17-zoom_certificates.md @@ -345,27 +345,26 @@ The signature's hash is calculated over the following data (see [Computing Signa - serialized primary key's public data - serialized direct key signature packet (excluding the unhashed area) - (zoom_enc_subkey)= ## Encryption subkey -Now we'll look at a subkey in Alice's certificate. An OpenPGP subkey, when it is linked to an OpenPGP certificate (via its primary key), consists of two elements: +Let's now look at a subkey in Alice's OpenPGP certificate. A subkey, when linked to an OpenPGP certificate via its primary key, consists of two elements: - a key packet that contains the component key itself, and -- a signature packet that links this component key to the primary key (and thus implicitly to the full OpenPGP certificate). +- a signature packet that links this component key to the primary key and, implicitly, to the full OpenPGP certificate. -In this section, we'll use the files that contain individual packets of Alice's certificate, which we split apart above. In this split representation of Alice's certificate, the encryption subkey happens to be stored in `alice.pub-4--PublicSubkey`, and the associated binding self-signature for the subkey in `alice.pub-5--Signature`. +We will use the files containing individual packets of Alice's certificate, which we separated above. In this split representation, the encryption subkey is stored in `alice.pub-4--PublicSubkey`, while the associated binding self-signature is stored in `alice.pub-5--Signature`. ````{note} -It's common to look at a packet dump for a full OpenPGP certificate, like this: +It's common to look at a packet dump for a full OpenPGP certificate as shown below: ```text $ sq packet dump --hex alice.pub ``` -That command shows the details for the full series of packets in an OpenPGP certificate (recall the list of [packets of Alice's certificate](split_alice)). Finding a particular packet in that list can take a bit of focus and practice though. +This command shows the details for the full series of packets in an OpenPGP certificate (refer to the list of [packets of Alice's certificate](split_alice)). Finding a particular packet in that list can take a bit of focus and practice though. -In the following sections we're making it a bit easier for ourselves, and directly look at individual packets, from the files we created with `sq packet split`, above. +In the following sections,we make it easier for ourselves by directly examining individual packets from the files we created with `sq packet split` above. ```` ### Public-Subkey packet