From e20a629db7dae117e5bc167f36a9a98781e6f6c3 Mon Sep 17 00:00:00 2001 From: "Tammi L. Coles" Date: Tue, 7 Nov 2023 21:33:19 +0100 Subject: [PATCH] edit signature types section in Ch6 --- book/source/06-signatures.md | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/book/source/06-signatures.md b/book/source/06-signatures.md index c644e9d..938e80f 100644 --- a/book/source/06-signatures.md +++ b/book/source/06-signatures.md @@ -24,28 +24,28 @@ Two meanings of the term "signature" in OpenPGP In this document, "signature" will refer to OpenPGP signature packets. (signature_types)= -## Types of signatures in OpenPGP +## Signature types in OpenPGP -The OpenPGP standard defines a set of [Signature Types](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-12.html#name-signature-types), each identified by a numerical *signature type ID*. Signature types define the intent of a signature, and how it needs to be interpreted. +The OpenPGP standard defines a set of [Signature types](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-12.html#name-signature-types), each identified by a numerical *signature type ID*. Signature types define the purpose of a signature and how it should be interpreted. -Most OpenPGP signature types can be classified as either: +Signature types can be predominantly classified in two ways: -- *Signatures over data* (type IDs `0x00` and `0x01`), or -- *Signatures on components* (that is: signatures that apply to component keys or identity components). +- **Signatures over data**: These signatures are denoted by type IDs `0x00` for binary documents and `0x01` for canonical text documents. The signer uses these signatures to claim ownership, assert creation, or certify the immutability of the document. +- **Signatures on components**: These are signatures that are associated with component keys or identity components of a certificate. -Signature on components are a complex topic, which we discuss in depth in {ref}`component_signatures_chapter`. They are grouped in two dimensions: +Signatures on components are a complex topic, and we discuss them in depth in {ref}`component_signatures_chapter`. They are grouped based on two criteria: -- Who issued the signature (self-signature vs. third party signature)? -- What kind of statement does the signature make (certify an identity, or bind component keys into a certificate)? +- the origin of the signature, distinguishing between a self-signature and a third-party signature +- the nature of the statement made by the signature, such as certifying an identity or binding component keys into a certificate ```{figure} mermaid/sig-types.png An overview of signature types in OpenPGP ``` -In this chapter we discuss general principles, which apply to all types of OpenPGP signatures. +This chapter will cover the overarching principles applicable to all OpenPGP signature types. -For more detail about specific types of signatures, see the chapters {ref}`signing_data` and {ref}`component_signatures_chapter`, respectively. +For more detail about specific types of signatures, see the chapters on {ref}`signing_data` and {ref}`component_signatures_chapter`, respectively. ## Structure of an OpenPGP signature packet