Comment 38 for bug 1558331

I did a Google search on " " and found this old (2009) article from Debian concerning the algorithm used for signing the package digest: https://www.debian-administration.org/users/dkg/weblog/48

Is it applicable to this issue?