3 ms·
They are referring to https://efail.de/ https://efail.de/ - works on both PGP and S/MIME, which was disclosed just over a year before the article was published.
by sbuk 5y ago
They are referring to https://efail.de/ https://efail.de/ - works on both PGP and S/MIME, which was disclosed just over a year before the article was published. The article references this in a link to another post a few sentences before the one you quoted.
- megous 5y agoProcessing PGP messages where correctly signed MAC doesn't match the ciphertext should not be an option at all. Message was tapered with, so MUAs have no business processing it. So unless the attacker can also produce the correct MAC matching the ciphertext, which should not be possible with out knowing a private key, I don't see how this can't be easily fixed just by checking the ciphertext against the MAC.
- upofadown 5y agoMinor quibble, OpenPGP uses an authentication method called the modification detection code (MDC). It's kind of a checksum that is protected by the overlaying encryption. Very simple. It turned out to be more secure than anticipated and as a result is still in use.