duplicate (pubkey-only) key IDs (was: Re: [Sks-devel] Permanent diff with pgp.srv.ualberta.ca)

[Jason Harris]

On Thu, Sep 01, 2005 at 01:24:09PM +0200, Dinko Korunic wrote:

> I've noticed something strange trying to cleandb databases at pks.aaiedu.hr:
> long time ago I've built them with sks merge on a recent keydump and cleaned
> them afterwards. Inspired with recent discussions, I've deleted KDB/meta and
> did a cleandb run. And again, several days after. And again, several days 
> after
> - resulting with same errors every time in a clean.log. Somehow this doesn't
> look as cleandb really fixes those issues:
> 
> 2005-09-01 01:58:08 Direct canonicalization complete
> 2005-09-01 01:58:08 Merging keys in database
> 2005-09-01 01:58:08 Starting key merge
> 2005-09-01 01:58:08 Multiple keys found with same ID.  merge_from_hashes 
> called
> 2005-09-01 01:58:08 Hash: 4A890E696081B0D3B747143BFB881E79
> 2005-09-01 01:58:08 Hash: 600066ED625D84CE88211E0252A675D7

These are keys with the same (short) keyid:

  
http://pks.aaiedu.hr:11371/pks/lookup?op=index&fingerprint=on&search=0x00000001&hash=on

  pub  1024R/00000001 1996-06-08 Jo Schueth, Bonn
           Hash=4A890E696081B0D3B747143BFB881E79
           Fingerprint=8B 43 A9 4A 40 E1 3E 92  3E 37 9D 74 BD 86 10 40
  pub  1025R/00000001 1997-01-11 Rocke Verser
           Hash=600066ED625D84CE88211E0252A675D7
           Fingerprint=EE 73 A9 78 60 9C BA CA  DF FC 68 37 CD 73 F3 96

(The long key IDs are 145DCD7A00000001 and 723B4CA500000001, respectively.)

As you may know, there are plenty of such keys:

  http://keyserver.kjsl.com/~jharris/duplicate_keyids.html

> palunko% egrep -e '2005-09-01.*Multiple keys found' clean.log | wc -l
>     1078
> 
> Is this normal?

Currently, looking at pubkey-only key IDs:

  %db_stat-4.3 -d KDB/keyid
  ...
  2223152 Number of unique keys in the tree
  2224235 Number of data items in the tree
  ...

  %expr 2224235 - 2223152
  1083

So, no, it looks like you're missing a few.

-- 
Jason Harris           |  NIC:  JH329, PGP:  This _is_ PGP-signed, isn't it?
address@hidden _|_ web:  http://keyserver.kjsl.com/~jharris/
          Got photons?   (TM), (C) 2004

pgpac0ZuxLv0u.pgp
Description: PGP signature