How can an attacker create a key pair with the same (short) KeyID
<p>Alice gets Bob's public key (either in email or from a server), then calls Bob on the phone and checks his short KeyID.</p>

<p>There are 16^8 ~ 4.3 billion possible KeyIDs consisting of 8 hex characters.</p>

<p>Is it feasible for an attacker to generate a database with 4.3 billion keys to cover all the possible IDs with specific name, email address, and date??
Can Date, Name and Email can be changed after it is created. </p>

<p>Is it not correct to assume that creating 4 billion 4K keys for each attack seems out of questions.</p>

<p>A related question is about long KeyID this seems so secure that there should never be any need to use the fingerprint.</p>

<p>Is the caution against using short KeyIDs just paranoia without base in reality?
I am talking about 3k and 4k keys. </p>

<p>Thank you in advance for your kind help with this problem.</p>