[gobolinux-users] What am I signing?

[Dan]

I decided to use the first actual break I've gotten in a couple of  
months to update my computer. Every time I Compile something, I have  
to go through this process:

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
SymlinkProgram: Done.
sudo: no passwd entry for root!
SignProgram: Creating FileHash
sudo: no passwd entry for root!
SignProgram: Signing FileHash

You need a passphrase to unlock the secret key for
user: "Dan Charney <drmoose at drmoose.net>"
1024-bit DSA key, ID CC28D16F, created 2006-02-22
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Freshen is on update 20 of 89, which means I'll have to type my 21- 
character passphrase another 69 times. I'd love to know why. What is  
the FileHash I'm signing, and why do I have to sign it?

Thanks
Dan