comment 1

Kelly
Mon, 13 Oct 2025 23:12:17 +0200

I bet the RPM internal OpenPGP implementation(!) doesn't support ECDSA keys.

It looks like since RPM 4.18 they have had a Sequoia integration solution, and it is now the default (I think since RPM 4.18? Definitely is in Fedora 38 (April 2023), so whatever version it has) (but internal imp. is sticking around for a while of course, as a build option). So I wonder if the Sequoia version would work with ECDSA OpenPGP keys...

RHEL (and friends) v9 is still on RPM v4.16 though. Not sure what EL 10 is on...

This article is where I got this idea from: https://sequoia-pgp.org/blog/2023/04/27/rpm-sequoia/

In any case I confirm that I couldn't make rpm (4.16) accept an ECDSA PGP key, but it accepted RSA and DSA/Elgamal (classic DSA) keys ok. As far as importing them anyway, I didn't test sign and verify a package...

Kinda wild since the RPM package signature has supported EC for a good while