title: Java BouncyCastle signing without a passphrase
body: <p>I am using bcpg-jdk16 version 1.46 with Java 8 and have attempted to,based on the examples (<a href="https://github.com/bcgit/bc-java/tree/master/pg/src/main/java/org/bouncycastle/openpgp/examples" rel="nofollow">https://github.com/bcgit/bc-java/tree/master/pg/src/main/java/org/bouncycastle/openpgp/examples</a>), sign a file with a PGP key generated on another system. </p>
  
  <p>The PGP keys in question has no associated passphrase.</p>
  
  <p>When we attempt to sign using the example code the file I receive an exception "checksum mismatch at 0 of 20"</p>
  
  <p>Which seems to indicate that the passphrase is incorrect. Based on a quick inspection of the library.</p>
  
  <p>I attempt the same with a certificate that was generated with a passphrase and this was able to generate signatures for the file in question.</p>
  
  <p>I am not overly familiar with these security aspects so the question is whether this is an issue with the bouncy castle library itself.</p>
  
  <p>using gpg I am able to sign and verify the file with both certificates without issue.</p>