I realize (using
--clearsign) that GnuPG is using
SHA256 as the hashing algorithm for signing, but I would like to be able to see the actual
SHA256 hash in the signature somewhere. Is there a way with
--list-packets or perhaps with
xxd or something like that to show the actual
SHA256 hash that is signed?
Also, if I wanted to verify that hash by hand, how would I do it?
- GZip cleartext message
- Hash the gzip stream with