This is wrong on every conceivable level: 1. Key IDs are 32-bit truncations of the SHA-1 hash. That means 32 bits of state, not 160. Fake key IDs are observabl

This is wrong on every conceivable level: 1. Key IDs are 32-bit truncations of the SHA-1 hash. That means 32 bits of state, not 160. Fake key IDs are observable in the wild[1]. 2. You're confusing pre-image resistance with collision resistance. SHA-1 has been publicly vulnerable to practical collision attacks since 2017[2]. [1]: https://www.phoronix.com/news/Short-PGP-Collision-Attacks https://www.phoronix.com/news/Short-PGP-Collision-Attacks [2]: https://shattered.io/ https://shattered.io/