[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Relevant diffs between -04 and -05



This is it. I edited out header/footer diffs, TOC diffs, and version number
change diffs.

	Jon

749c749
<    MUST be at least 512 octets long. Partial Body Lengths MAY NOT be
---
>    MUST be at least 512 octets long. Partial Body Lengths MUST NOT be
1285,1287c1285,1287
<    uncompressed data is preferred; the key holder's software may not
<    have compression software. This is only found on a self-signature.
<
---
>    uncompressed data is preferred; the key holder's software might have
>    no compression software in that implementation. This is only found
>    on a self-signature.
1934,1935c1934,1935
<    implementation uses more bits of compression, If an implementation
<    uses more bits of compression, PGP V2.6 cannot decompress it.
---
>    implementation uses more bits of compression, PGP V2.6 cannot
>    decompress it.
2199a2200,2208
>      - "Hash", a comma-separated list of hash algorithms used in this
>        message. This is used only in clear-signed messages.
>
>      - "Charset", a description of the character set that the plantext
>        is in. Please note that OpenPGP defines text to be in UTF-8, so
>        this Armor Header Key is only useful for backwards
>        compatibility. An implementation MAY implement it; an
>        implementation MAY ignore it.
>
2361c2367
<      - Zero or more "Hash" Armor Headers,
---
>      - One or more "Hash" Armor Headers,
2373,2375c2379,2382
<    SHA-1 is used. If more than one message digest is used in the
<    signature, the "Hash" armor header contains a comma-delimited list
<    of used message digests.
---
>    MD5 is used, an implementation MAY omit them for V2.x compatibility.
>    If more than one message digest is used in the signature, the "Hash"
>    armor header contains a comma-delimited list of used message
>    digests.
2877c2887
<    algorithm identifier 20.
---
>    algorithm identifier 20 for an Elgamal public key that can sign.
2961a2976,2982
>    Many security protocol designers think that it is a bad idea to use
>    a single key for both privacy (encryption) and integrity
>    (signatures). In fact, this was one of the motivating forces behind
>    the V4 key format with separate signature and encryption keys. If
>    you as an implementor promote dual-use keys, you should at least be
>    aware of this controversy.
>
2973c2990,2991
<    could leak the secret key.
---
>    could leak the secret key. These same considerations about the
>    quality of the hash algorithm apply to Elgamal signatures.
3030,3031c3050,3052
<      * PGP 5.0 can read an RSA key in V4 format, but will only
<        recognize it using V3 format.
---
>      * PGP 5.0 can read an RSA key in V4 format, but can only recognize
>        it with a V3 keyid, and can properly use only a V3 format RSA
>        key.
3041,3043d3061
<      * PGP 2.6.x and PGP 5.0 sometimes add to the beginning of a file a
<        zero-length compressed data packet.
<