Re: [openpgp] changing the trailer for hashed data in v5 OpenPGP signatures

[Daniel Huigens <[e-mail]>]

Hi dkg,

Yeah, I think your analysis is correct. And I also prefer just leaving
the length at 4 octets rather than the workaround of splitting up the
length into 2 x 4 octets.

I do think that, for robustness and to prevent similar issues in the
future, it may make sense to hash the signature version at the
beginning, in addition to the end. That way, in v7(?), we would be free
to change the trailer without such considerations, if we wanted.
(We'd have to make sure that you can always tell from the one-pass
signature packet or armor headers which version it is, though.)
But, maybe it's a bit late for that change / not worth it, we can also
leave it.

Best,
Daniel