3 ms·
Also, the second attack seems quite similar to https://eprint.iacr.org/2005/033.pdf https://eprint.iacr.org/2005/033.pdf.
by AnaniasAnanas 8y ago
Also, the second attack seems quite similar to https://eprint.iacr.org/2005/033.pdf https://eprint.iacr.org/2005/033.pdf.
- tptacek 8y agoIt's not. The MDC-stripping attack on PGP is very well known --- it's obvious from the structure of the protocol. The paper you're citing uses it to build a direct plaintext recovery attack similar to a padding oracle. Today's paper uses ciphertext malleability to inject active content that exfiltrates the plaintext.