Add input from Wiktor

This commit is contained in:
Heiko Schaefer 2023-09-28 16:02:30 +02:00
parent 3ef4f265d1
commit eef2a11842
No known key found for this signature in database
GPG key ID: 4A849A1904CCBD7D
4 changed files with 63 additions and 9 deletions

View file

@ -8,4 +8,19 @@
- using revoked certificate?
- using expired subkey?
- using revoked subkey?
```
```
## Advanced topics
### Selecting decryption key
- Trying PKESKs until one works out
- consider "smart" strategies
additional wrinkle: hidden intended decryption key (`gnupg --throw-keyid`)
also see:
https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-10.html#pkesk-notes
> An implementation MAY accept or use a Key ID of all zeros, or an omitted key fingerprint, to hide the intended decryption key