Re: [openpgp] Combining signature with signer's public key

"Neal H. Walfield" <> Fri, 11 December 2020 08:34 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 1EA6F3A082F; Fri, 11 Dec 2020 00:34:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id RTOfrTwLa3Z9; Fri, 11 Dec 2020 00:34:40 -0800 (PST)
Received: from ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 4653F3A0913; Fri, 11 Dec 2020 00:34:39 -0800 (PST)
Received: from ([] by with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.86_2) (envelope-from <>) id 1kndsr-0001oR-Ap; Fri, 11 Dec 2020 08:34:37 +0000
Received: from ([] by with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from <>) id 1kndsq-0005EM-Vw; Fri, 11 Dec 2020 09:34:37 +0100
Date: Fri, 11 Dec 2020 09:34:36 +0100
Message-ID: <>
From: "Neal H. Walfield" <>
To: Wiktor Kwapisiewicz <>
Cc: Kai Engert <>,
In-Reply-To: <>
References: <> <>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI-EPG/1.14.7 (Harue) FLIM/1.14.9 (Gojō) APEL/10.8 EasyPG/1.0.0 Emacs/26 (x86_64-pc-linux-gnu) MULE/6.0 (HANACHIRUSATO)
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset="US-ASCII"
X-SA-Exim-Scanned: No (on; SAEximRunCond expanded to false
Archived-At: <>
Subject: Re: [openpgp] Combining signature with signer's public key
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Fri, 11 Dec 2020 08:34:51 -0000

Hi Kai,

On Fri, 11 Dec 2020 08:21:26 +0100,
Wiktor Kwapisiewicz wrote:
> On 10.12.2020 22:38, Kai Engert wrote:
> > Is it possible to include the sender's own public key as part of a
> > detached OpenPGP signature?
> You may be interested in the Key Block signature subpacket as detailed
> in here:

Storing the certificate in a subpacket area of the signature, as
Wiktor points out, is reasonable.

The subpacket that Wiktor references, however, was added to 4880bis
without any discussion on this mailing list, as far as I am aware
(please correct me if I am wrong).  As such, I would recommend that
you instead use a notation.  If, at a later point, this subpacket or a
similar one is indeed standardized, it is straightforward enough to
adapt your implementation.

You could actually store the subpacket or notation in the unhashed
subpacket area since the content is self authenticating (you can check
that the certificate is valid by checking the signature).

One thing to be aware of: the subpacket areas can only hold 64kb of
data.  So, you really should minimize the certificate.

:) Neal