sqv can't verify sigs created with my key, gpg works fine, other similar keys work fine
This issue is NOT a duplicate of #18 - has nothing to do with compression.
This issue is NOT a duplicate of #5 - has nothing to do with signature/certification creation date times.
$ sqv -v --keyring=keyring.2.asc --signature-file=message.txt.2.asc message.txt
4C5F29D5DA5CF814FCBE0926B21375935F1061AF
1 of 1 signatures are valid (threshold is: 1).
$ sqv -v --keyring=keyring.0.asc --signature-file=message.txt.0.asc message.txt
Signing key on 0152DF7147EC5E633E0057FB56034877E1F87C35 is not bound:
No binding signature at time 2025-11-14T20:20:35Z
0 of 1 signatures are valid (threshold is: 1).
1
$ gpg --keyring ./keyring.0.asc --verify message.txt.0.asc message.txt
gpg: Signature made Fri 14 Nov 2025 20:20:35 GMT
gpg: using EDDSA key 5E6229CD43D1A967D4D8711AEB1FC8DA45FB2930
gpg: Good signature from "Ximin Luo" [ultimate]
gpg: aka " <infinity0@pwned.gg>" [ultimate]
gpg: aka " <infinity0@debian.org>" [ultimate]
gpg: aka " <infinity0@torproject.org>" [ultimate]
gpg: aka " <infinity0@freenetproject.org>" [ultimate]
I cannot figure out what is the substantial difference between the two keys:
key 0 (my key), gpg --list-packets output, edited to make it easier to compare with above:
# off=0 ctb=98 tag=6 hlen=2 plen=51
:public key packet:
version 4, algo 22, created 1418476654, expires 0
pkey[0]: [80 bits] ed25519 (1.3.6.1.4.1.11591.15.1)
pkey[1]: [263 bits]
keyid: 56034877E1F87C35
# off=53 ctb=b4 tag=13 hlen=2 plen=9
:user ID packet: "Ximin Luo"
# off=64 ctb=88 tag=2 hlen=2 plen=193
:signature packet: algo 22, keyid 56034877E1F87C35
version 4, created 1746611106, md5len 0, sigclass 0x13
digest algo 10, begin of digest 75 d7
hashed subpkt 26 len 38 (policy: git://github.com/infinity0/pubkeys.git)
hashed subpkt 27 len 1 (key flags: 01)
hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 3)
hashed subpkt 21 len 4 (pref-hash-algos: 10 9 8 11)
hashed subpkt 22 len 4 (pref-zip-algos: 2 3 1 0)
hashed subpkt 30 len 1 (features: 01)
hashed subpkt 23 len 1 (keyserver preferences: 80)
hashed subpkt 25 len 1 (primary user ID)
hashed subpkt 33 len 21 (issuer fpr v4 0152DF7147EC5E633E0057FB56034877E1F87C35)
hashed subpkt 2 len 4 (sig created 2025-05-07)
hashed subpkt 9 len 4 (key expires after 11y232d20h27m)
subpkt 16 len 8 (issuer key ID 56034877E1F87C35)
data: [256 bits]
data: [254 bits]
[.. other uids and subkeys omitted for brevity ..]
# off=1137 ctb=b8 tag=14 hlen=2 plen=51
:public sub key packet:
version 4, algo 22, created 1418476679, expires 0
pkey[0]: [80 bits] ed25519 (1.3.6.1.4.1.11591.15.1)
pkey[1]: [263 bits]
keyid: EB1FC8DA45FB2930
# off=1190 ctb=89 tag=2 hlen=3 plen=262
:signature packet: algo 22, keyid 56034877E1F87C35
version 4, created 1746611128, md5len 0, sigclass 0x18
digest algo 10, begin of digest 56 a2
hashed subpkt 33 len 21 (issuer fpr v4 0152DF7147EC5E633E0057FB56034877E1F87C35)
hashed subpkt 2 len 4 (sig created 2025-05-07)
hashed subpkt 26 len 38 (policy: git://github.com/infinity0/pubkeys.git)
hashed subpkt 27 len 1 (key flags: 02)
hashed subpkt 9 len 4 (key expires after 11y232d20h27m)
subpkt 16 len 8 (issuer key ID 56034877E1F87C35)
subpkt 32 len 94 (signature: v4, class 0x19, algo 22, digest algo 10)
data: [255 bits]
data: [255 bits]
key 2 (test key), gpg --list-packets output, edited to make it easier to compare with above:
# off=0 ctb=98 tag=6 hlen=2 plen=51
:public key packet:
version 4, algo 22, created 1763151407, expires 0
pkey[0]: [80 bits] ed25519 (1.3.6.1.4.1.11591.15.1)
pkey[1]: [263 bits]
keyid: B21375935F1061AF
# off=53 ctb=b4 tag=13 hlen=2 plen=10
:user ID packet: "SqvBugTest"
# off=65 ctb=88 tag=2 hlen=2 plen=193
:signature packet: algo 22, keyid B21375935F1061AF
version 4, created 1763152083, md5len 0, sigclass 0x13
digest algo 10, begin of digest b4 dd
hashed subpkt 26 len 38 (policy: git://github.com/infinity0/pubkeys.git)
hashed subpkt 27 len 1 (key flags: 01)
hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 3)
hashed subpkt 21 len 4 (pref-hash-algos: 10 9 8 11)
hashed subpkt 22 len 4 (pref-zip-algos: 2 3 1 0)
hashed subpkt 30 len 1 (features: 01)
hashed subpkt 23 len 1 (keyserver preferences: 80)
hashed subpkt 25 len 1 (primary user ID)
hashed subpkt 33 len 21 (issuer fpr v4 4C5F29D5DA5CF814FCBE0926B21375935F1061AF)
hashed subpkt 2 len 4 (sig created 2025-11-14)
hashed subpkt 9 len 4 (key expires after 3y0d0h0m)
subpkt 16 len 8 (issuer key ID B21375935F1061AF)
data: [256 bits]
data: [256 bits]
[.. no other uids and subkeys compared to key 0, shouldn't matter ..]
# off=260 ctb=b8 tag=14 hlen=2 plen=51
:public sub key packet:
version 4, algo 22, created 1763151460, expires 0
pkey[0]: [80 bits] ed25519 (1.3.6.1.4.1.11591.15.1)
pkey[1]: [263 bits]
keyid: 7777B616BA72D56C
# off=313 ctb=89 tag=2 hlen=3 plen=279
:signature packet: algo 22, keyid B21375935F1061AF
version 4, created 1763151460, md5len 0, sigclass 0x18
digest algo 10, begin of digest 52 cb
hashed subpkt 33 len 21 (issuer fpr v4 4C5F29D5DA5CF814FCBE0926B21375935F1061AF)
hashed subpkt 2 len 4 (sig created 2025-11-14)
hashed subpkt 26 len 38 (policy: git://github.com/infinity0/pubkeys.git)
hashed subpkt 27 len 1 (key flags: 02)
[.. no expiry date on this subkey, shouldn't matter ..]
subpkt 16 len 8 (issuer key ID B21375935F1061AF)
subpkt 32 len 117 (signature: v4, class 0x19, algo 22, digest algo 10)
data: [255 bits]
data: [256 bits]
Edited by Ximin Luo