Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

KeyID format

4 views
Skip to first unread message

Miner

unread,
Jun 19, 2022, 7:58:53 AM6/19/22
to
How to change keyid format from 40 to 16 digits lenght when GnuPG
verify a signature?

--
Miner

David W. Hodgins

unread,
Jun 19, 2022, 9:47:45 AM6/19/22
to
On Sun, 19 Jun 2022 07:58:46 -0400, Miner <inv...@invalid.invalid> wrote:

> How to change keyid format from 40 to 16 digits lenght when GnuPG
> verify a signature?

The keyid may be specified using 40 hex characters or using 8 hex characters.
gpg --list-key 0xA97B385144E498D9157EDA1039B84EA598B013E0
and
gpg --list-key 0x98B013E0

The leading 0x can be ommitted. It's used for consistency with old versions
of pgp.

Note the 8 hex char version is identical to the last 8 hex characters of the
long version.

If you're asking how to get gpg to only show the short version, I don't think
it can be done. The long version exists and is used as there have been key id
collisions using only the 8 hex character version.

While the short version is still allowed, there is a risk that it may match
more than one key. Continue using it at your own risk.

Regards, Dave Hodgins

David E. Ross

unread,
Jun 19, 2022, 11:33:22 AM6/19/22
to
On 6/19/2022 4:58 AM, Miner wrote:
> How to change keyid format from 40 to 16 digits lenght when GnuPG
> verify a signature?
>

The long "key ID" (40 hex digits) is actually the key's fingerprint.

Actual key IDs are 8 hex digits. For DH/DSS keys and modern RSA keys ,
the last 8 hex digits of its fingerprint are the key ID. For legacy RSA
keys, the key ID is distinct from the key ID.

--
David E. Ross
"A Message to Those Who Are Not Vaccinated"
See my <http://www.rossde.com/index.html#vaccine>.

Miner

unread,
Jun 19, 2022, 12:17:37 PM6/19/22
to
David E. Ross wrote:

> On 6/19/2022 4:58 AM, Miner wrote:
> > How to change keyid format from 40 to 16 digits lenght when
> > GnuPG verify a signature?
>
> The long "key ID" (40 hex digits) is actually the key's
> fingerprint.
>
> Actual key IDs are 8 hex digits. For DH/DSS keys and modern
> RSA keys , the last 8 hex digits of its fingerprint are the key
> ID. For legacy RSA keys, the key ID is distinct from the key
> ID.

gpg: Signature made Sun Jun 19 14:24:02 2022
gpg: using EDDSA key ooooooooooooooooooooooooxxxxxxxxxxxxxxxx

In this example GnuPG concatenate unknown digits to my Key ID.

"xxxxxxxxxxxxxxxx" correspondent to my key ID. What is
"oooooooooooooooooooooooo" I have no idea. Could anyone tell me
what is it?
--
Miner

David W. Hodgins

unread,
Jun 19, 2022, 1:09:34 PM6/19/22
to
On Sun, 19 Jun 2022 12:17:30 -0400, Miner <inv...@invalid.invalid> wrote:
> gpg: Signature made Sun Jun 19 14:24:02 2022
> gpg: using EDDSA key ooooooooooooooooooooooooxxxxxxxxxxxxxxxx
> In this example GnuPG concatenate unknown digits to my Key ID.
> "xxxxxxxxxxxxxxxx" correspondent to my key ID. What is
> "oooooooooooooooooooooooo" I have no idea. Could anyone tell me
> what is it?

https://en.wikipedia.org/wiki/Public_key_fingerprint

Regards, Dave Hodgins
0 new messages