Hot answers tagged

1

While not explicitly stated, apparently --export-minimal drops expired subkeys, which make sense. The option you need is probably self-sigs-only. However, that is a filter only for import. We would need to use an intermediate keyring for that TEMPORARY_KEYRING=`mktemp -d --tmpdir` gpg --armor --export keyid | GNUPGHOME="$TEMPORARY_KEYRING" gpg --...


1

One possible attack is Chosen-plaintext attack. The oracle/blackbox would be the Git signatures. Consensus I found on the practicality is close to zero. And the gnupg folks even default the main key to Certify and Sign, which might show some confidence on their signing methods being able to isolate any key reversal. Though everyone suggest to not sign/...


Only top voted, non community-wiki answers of a minimum length are eligible