Only apply randomization to less than version six

ProtonMail · Jun 24, 2024 · 4477c15 · 4477c15
1 parent e3a3edc
commit 4477c15
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/openpgp/packet/signature.go b/openpgp/packet/signature.go
@@ -880,7 +880,7 @@ func (sig *Signature) Sign(h hash.Hash, priv *PrivateKey, config *Config) (err e
 	}
 	sig.Version = priv.PublicKey.Version
 	sig.IssuerFingerprint = priv.PublicKey.Fingerprint
-	if priv.Version != 6 && config.RandomizeSignaturesViaNotation() {
+	if sig.Version < 6 && config.RandomizeSignaturesViaNotation() {
 		sig.removeNotationsWithName(SaltNotationName)
 		salt, err := SignatureSaltForHash(sig.Hash, config.Random())
 		if err != nil {