Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

PGP public keys look something like

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.9 (GNU/Linux)

mQGiBEl2HAgRBAC9IZGQE3NRWFoXV7CcVRbo7xMe+nGPRMTOocA0pcv9N67R6CAZ
...
-----END PGP PUBLIC KEY BLOCK-----

I'm wondering why the 'Version:' line is always included and if it's safe to remove. Why advertize what version of GPG/PGP and operating system being used if decryption does not depend on information in the 'Version:' line?

share|improve this question

2 Answers 2

up vote 2 down vote accepted

This version number will be usefull in the case in the future a known version of OpenGPG will be announced broken on a given set of OS.

Upon receiving a signed or crypted message using this broken version of OpenGPG, you will be able to decide to change your trust level attributed to this key.

On the other hand, I don't see any real advantage to hide the origin tracking information of a key generation.

share|improve this answer

You can safely remove that line. RFC 4880, OpenPGP does not declare it as required.

Currently defined Armor Header Keys are as follows:

  • "Version", which states the OpenPGP implementation and version used to encode the message.
  • [...]

I also could not find any evidence of version data being included in the binary version, neither by reading the RFC nor by viewing at the package data using gpg --list-packets.


To remove it, use --no-emit-version. From man gpg:

   --emit-version
   --no-emit-version
          Force inclusion of the version string in ASCII armored output.   --no-emit-
          version disables this option.
share|improve this answer
    
Thanks. Searching "--no-emit-version" I was able to find this, which shows an easy way to add --no-emit-version to enigmail. –  kzoo Dec 7 '13 at 17:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.