> The attacker would only get one guess As described in Efail, they don’t need to guess; they know the first 11 bytes with very, very high probability. I doub

> The attacker would only get one guess As described in Efail, they don’t need to guess; they know the first 11 bytes with very, very high probability. I doubt me being able to read a third of your encrypted emails is remotely acceptable to you. > The recipient […] would see the attack message and would immediately know there was something going on. That solace is fleeting when it is already too late. The attacker has your decrypted message.