openpgp: Put all information into the hashed subpacket area.

  - Put the Issuer, IssuerFingerprint, and EmbeddedSignature
    subpackets into the hashed subpacket area.

  - Even though this information is self-authenticating (the act of
    validating the signature authenticates the subpacket), it is stored
    in the unhashed subpacket area.  This has the advantage that the
    signer authenticates the set of issuers.  Furthermore, it makes
    handling of the resulting signatures more robust: If there are two
    two signatures that are equal modulo the contents of the unhashed
    area, there is the question of how to merge the information in the
    unhashed areas.  Storing issuer information in the hashed area avoids
    this problem.

0 files changed, 0 insertions, 0 deletions