我有多个用于签名和加密的子密钥。这是我的公钥和私钥列表。
jeremy@localhost ~
$ gpg -k
/home/jeremy/.gnupg/pubring.gpg
-------------------------------
pub 4096R/35E40FA7 2015-04-14
uid keybase.io/jeremytwfortune <jeremytwfortune@keybase.io>
uid Jeremy Fortune <jeremytwfortune@gmail.com>
uid Jeremy Fortune <jeremy.fortune@uvmhealth.org>
sub 2048R/73671EAD 2015-04-14 [expires: 2023-04-12]
sub 2048R/0690427C 2015-04-14 [expires: 2023-04-12]
sub 4096R/AEE9FB5F 2015-12-06 [expires: 2025-12-03]
sub 4096R/757D1A1D 2015-12-06 [expires: 2025-12-03]
sub 2112R/9B5BAC36 2015-12-06 [expires: 2025-12-03]
sub 4096R/5A8F548A 2015-12-06 [expires: 2025-12-03]
jeremy@localhost ~
$ gpg -K
/home/jeremy/.gnupg/secring.gpg
-------------------------------
sec 4096R/35E40FA7 2015-04-14
uid keybase.io/jeremytwfortune <jeremytwfortune@keybase.io>
ssb 2048R/73671EAD 2015-04-14
ssb 2048R/0690427C 2015-04-14
当我给自己加密消息时，会使用最新的加密密钥 (9b5bac36)。这看起来没问题，因为它是一个子密钥，但是在解密时，gpg 仍然只是在寻找那个私钥。它甚至不会尝试使用 0690427c。
jeremy@localhost ~
$ echo -e …