Package: gnupg
Version: 1.4.2.2-1
Severity: normal

Messages clearsigned and then "decrypted" may not return the original
message.  In particular, a newline may be added.

    % echo -n hello > out
    % ls -l out
    -rw-rw-r-- 1 andrew andrew 5 2006-04-06 15:51 out
    % gpg --clearsign out
    % gpg --decrypt --output out2 out.asc
    gpg: Signature made Thu 06 Apr 2006 03:51:09 PM PDT using DSA key ID 
43ABB76D
    gpg: Good signature from "Andrew Pimlott <[EMAIL PROTECTED]>"
    % ls -l out2 
    -rw-rw-r-- 1 andrew andrew 6 2006-04-06 15:51 out2

If you clearsign both "hello" and "hello\n", you will see that they
result in the same "SIGNED MESSAGE".

Andrew

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages gnupg depends on:
ii  libbz2-1.0                    1.0.3-2    high-quality block-sorting file co
ii  libc6                         2.3.6-4    GNU C Library: Shared libraries an
ii  libldap2                      2.1.30-13  OpenLDAP libraries
ii  libreadline5                  5.1-7      GNU readline and history libraries
ii  libusb-0.1-4                  2:0.1.11-7 userspace USB programming library
ii  makedev                       2.3.1-80   creates device files in /dev
ii  zlib1g                        1:1.2.3-11 compression library - runtime

gnupg recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to