gnupgpgpopenpgpgpg-signature

What are the meaningful differences between .gpg, .sig., & .asc?


I’m aware that .asc signatures are output as a text file, while .sig & .gpg are binary.

That aside:

  1. Are .sig and .gpg the same file with different extensions? If not, why use one over the other?
  2. Between text files and binary files, what are the relative advantages? Security, efficiency, compatibility, etc.

Solution

  • Are .sig and .gpg the same file with different extensions?

    No, they are different file in the context of GnuPG.

    If not, why use one over the other?

    Good question! Since OpenPGP is an open standard (RFC 4880), its section 6 provides detailed explanation, I just quote the key part:

    In principle, any printable encoding scheme that met the requirements of the unsafe channel would suffice, since it would not change the underlying binary bit streams of the native OpenPGP data structures. The OpenPGP standard specifies one such printable encoding scheme to ensure interoperability.

    I will use this answer as reply of Pros and Cons of binary vs ASCII format.