2 ms·
It is not recommended to use any keys for more than one purpose any more, this can allow attacks. So this is by design.
by justincormack 8y ago
It is not recommended to use any keys for more than one purpose any more, this can allow attacks. So this is by design.
- g45y45 8y agoRight, but how does one bind the keys if they do not mutually support encryption or signing
- AgentME 8y agoPGP never uses the same key for both either. A PGP "key" is a signing key and a decryption key bundled together and then signed by the signing key.
- throwaway415415 8y agoIt's not by design. There are stuff like decaf, ristretto and qDSA which "fix" this