Signing problem in SecuMail v1.3

[Northdogg]

Hello!

I'm just started to use SecuMail. All works perfect even signature verification, except signing messages.
I tried to send signed mails or copied to clipboard. I just received encrypted email that i successfully decrypted but with no signature.
I had made keypairs in GnuPG for Windows. Made two pairs so could encrypt and sign and send to myself. Here is the pictures from SecuMail shown
Settings pane and Signature Error

Should i use different programm to generate keypair or what do i did wrong?
Please advise.

Thank's in advance

Almost forgot
I have an iPhone 3Gs 32Gb iOS ver 4.3

[Ernesto]

Hi

Might seem like an obvious question, but do you have a public key with Key ID 37C79606 in your keyring?
That's the key that was used to sign the message.

Let me know if you do, and we'll run some other tests. Otherwise, you should just import that public key and signature should verify properly.

[Northdogg]

Yes I have. To proof here is picture of my test keyring

[Northdogg]

Just thought if You meant iPhone key Ring
Here it Is

[Northdogg]

Steel if I sing and encrypt text in SecuMail and then paste in message as plain text
i can decrypt it easy but can't see signature.

And strange but i tried to send signed and encrypted message to iPhone
i decripted it but received strange error of signature.
I signed message with key Key ID: 0xBFEB029D
encrypted it with Key ID: 0x37C79606
And here the screen of error:

[Ernesto]

A couple of things:

- As you can see on the key ring screen, only your Private Key for key 0x37C79606 is on the iPhone. You need to also import your Public key. Once you do, you'll read "ID: 37C79606 Public/Private Keys" under the key user ID/name.
- You cannot use key 0xBFEB029D for signing on the device, since only the Public Key is available. As a matter of fact, SecuMail shouldn't even allow you to select that key for signing. The Sign key selector should only let you select Private Keys. If this is not the case, please let me know.

This is how the signing/verifying process works:
- When signing, the Private Key is used to sign a digest of the message.
- When verifying, the Public Key is used to verify that the digest stored and the digest computed from the message matches.

So, in a nutshell, for signature verification you need public keys. To generate signatures you need private keys.

Let me know if you have any other questions.