3 ms·
Your comment presupposes that software never ever has bugs, which is clearly hard for any non trivial piece of code. Furthermore, the big is in the decryption
by klez 8y ago
Your comment presupposes that software never ever has bugs, which is clearly hard for any non trivial piece of code.
Furthermore, the big is in the decryption part of pgp, so the security of the encrypted communication doesn't seem to be at risk (unless the bug can somehow be used to exfiltrate your keys).
- logicallee 8y ago[removed]
- runesoerensen 8y ago> I don't think encrypted data at rest from the past few years can be decrypted It doesn't seem like you have the necessary knowledge about this particular bug to assert that, but the people who do are clearly stating that there's a risk of just that: "EFF has been in communication with the research team, and can confirm that these vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages." Also "We'll publish critical vulnerabilities in PGP/GPG and S/MIME email encryption on 2018-05-15 07:00 UTC. They might reveal the plaintext of encrypted emails, including encrypted emails sent in the past." https://twitter.com/seecurity/status/995906576170053633 https://twitter.com/seecurity/status/995906576170053633