diff --git a/book/source/diag/subkey_binding_backsig.png b/book/source/diag/subkey_binding_backsig.png new file mode 100644 index 0000000..3627494 Binary files /dev/null and b/book/source/diag/subkey_binding_backsig.png differ diff --git a/book/source/diag/subkey_binding_backsig.svg b/book/source/diag/subkey_binding_backsig.svg new file mode 100644 index 0000000..bad736d --- /dev/null +++ b/book/source/diag/subkey_binding_backsig.svg @@ -0,0 +1,484 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + key creation time + OpenPGP primary key(for certification) + This arrow is a shorthand forthe subkey binding signature + Primary key creates a "subkey binding signature" to associate the subkey with itself + + + + + + + key creation time + OpenPGP subkey(for signing) + Subkey binding signature + + + + + P + + Signature over:primary key + subkey + additional metadata (subpackets):- Embedded Signature "Primary Key Binding" (Signature over primary + subkey)- signature creation time- key expiration time- key flags- issuer fingerprint + + + + + + +