GnuPG could allow forged signatures.