GPG Mail: SHA1 hash algorithm found

com's Avatar


08 Mar, 2023 07:23 AM

When I use the signature for an E-Mail in MailMate it tells me: Note that the SHA1 hash algorithm has been found to have weaknesses

No hints about weak hash algorithm.

Additional info

macOS                   13.2        22D49
GPG Suite               2023.1      3410    (5c363bfe16)
GPG Mail (enabled)      7.1         2180    (acd878a2ce)    Decrypt Only Mode
GPG Keychain            1.12        1800    (a7b8825b15)
GPG Services            2.5         1200    (87637a835e)
MacGPG                  2.2.41      1050    (61c98963b6)
GPG Suite Preferences   2.6.1       1230    (2960a7a76a)
Libmacgpg               1.5.1       990     (8e1ef2f1e5)
pinentry           100     (b7195e9d4c)
  1. 1 Posted by com on 08 Mar, 2023 09:45 AM

    com's Avatar

    The issue has been resolved. I thought it was GPGTools, but it was MailMate - at least partially. If anyone else has this problem, I found the following solution to it:

    In the file ~user.gnupg\gpg.conf add the following line:

    personal-digest-preferences SHA512 SHA384 SHA256 SHA224

    The tip comes from the MailMate developer himself. Many thanks to Benny Kjær Nielsen.

  2. Support Staff 2 Posted by Steve on 22 Mar, 2023 11:17 AM

    Steve's Avatar

    Hi com,

    thanks for taking the time to report this problem.

    MailMate seems to be complaining about personal-digest-preferences in your gpg.conf file.

    To change those preferences:

    1. open new finder window
    2. press shift cmd G and paste /.gnupg
    3. open gpg.conf with TextEdit
    4. remove SHA1 from personal-digest-preferences
    5. press cmd S to save changes

    This entirely removes SHA1 usage.

    Glad you already found the solution.

    All the best,

  3. Steve closed this discussion on 22 Mar, 2023 11:17 AM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts


? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac