Not OP... 1. The last I looked the initiative was somewhat on pause. It turned out that the question of how best to avoiding emitting unauthenticated data in a

Not OP... 1. The last I looked the initiative was somewhat on pause. It turned out that the question of how best to avoiding emitting unauthenticated data in an authenticated encryption scheme for large streams/files was still open (see the age encryption utility for an example of an approach). At one point they had an implicit requirement for infinite memory. OpenPGP is primarily a message format. It would be inappropriate to use the standardization process to design and promote new cryptography. I suspect that this will start up again when there is more consensus as to the optimal approach. There is no huge hurry for email or file encryption as they are normally resistant to the sort of oracle attacks that AE prevents. The MDC has fared remarkably well over the years. There doesn't seem to be any huge hurry there either. 2. Probably. There isn't really very much there to attack. The actual cryptography is quite simple. When used for email you can do everything offline in a secure environment. So it is probably the strongest system commonly available in practice.