Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

The purpose of fingerprints (GPG)

A question about fingerprints:

Assume that me and my friend have a lot of time on our hands and that we have extremely good memory.

I send him my public key. To prove that the key he has on his computer is the same key that I sent him, I proceed to call him on the phone and read out the whole key in ASCII, as he checks it against what he has on his computer. (I know that it is unnecessary to send the key at all if I'm going to read it over the phone but this is just for the sake of the example.)

My question is then:

Is reading the entire key out loud over the phone to the other person and having him checking it against what he has on his computer equivalent to comparing the fingerprints of the key(s)? I.e, is the fingerprint just a means to assure that the message has not been intercepted and altered?

like image 505
Sahand Avatar asked Nov 16 '15 12:11

Sahand


1 Answers

The fingerprint is hash (like checksum) of the entire public key. The purpose is as you said - shorter way to compare the public key.

like image 79
i486 Avatar answered Oct 15 '22 07:10

i486