vanitasvitae/openpgp-notes
1
0
Fork 0
mirror of https://codeberg.org/openpgp/notes.git synced 2024-11-23 08:02:05 +01:00
Code Issues Projects Releases Packages Wiki Activity

Add signature diagram

Browse source
This commit is contained in:
Paul Schaub 2023-10-03 12:19:14 +02:00 committed by Heiko Schaefer
parent c5ba06dc78
commit 5f8e36a605
No known key found for this signature in database
GPG key ID: 4A849A1904CCBD7D
1 changed files with 42 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
book/source/06-certifications.md
View file

@ -23,6 +23,48 @@ Signatures are the glue that allows for keys, subkeys and identities to be assem
## Terminology
```{mermaid}
%%{ init: { 'flowchart': { 'curve': '' } } }%%
flowchart LR
signature(OpenPGP Signature) --> data & certification
data(Data Signature) --> binary & text
certification("Certification /
3rd-Party Certification") --> dksig & uidcert & uidrev & krev & selfcert
selfcert(Self Certification) --> skbind & skrev
subgraph Siganture Types and Targets
standalone[0x02: Standalone]
subgraph Signature Packets
confsig[0x50: Third-Party Confirmation]
timestamp[0x40: Timestamp]
end
subgraph Data Packets
binary[0x00: Binary Data]
text[0x01: Canonical Text]
end
subgraph User ID / User Attribute Packets
uidcert[
0x10: Generic Certification
0x11: Persona Certification
0x12: Casual Certification
0x13: Positive Certification
]
uidrev[0x30: Certification Revocation]
end
subgraph Subkeys
skbind[
0x18: Subkey Binding
0x19: Primary Key Binding
]
skrev[0x28: Subkey Revocation]
end
subgraph Primary Key
dksig[0x1F: Direct-Key Signature]
krev[0x20: Key Revocation]
end
end
```
The term *signature* can have multiple meanings in the context of the OpenPGP specification.
Cryptographic keys create raw signatures which are byte sequences calculated according to some signature scheme.
OpenPGP packs these raw signatures up into OpenPGP signature packets, which carry additional information in the form of signature subpackets.