8 ms·
What does OpenPGP do? If you have the MAC in plaintext, wouldn't anyone be able to determine who encrypted the message?
by diafygi 12y ago
What does OpenPGP do? If you have the MAC in plaintext, wouldn't anyone be able to determine who encrypted the message?
- maxerickson 12y agoIt calls it a modification detection code, but it does "Authenticate Then Encrypt": https://tools.ietf.org/html/rfc4880#section-5.13 https://tools.ietf.org/html/rfc4880#section-5.13 It also does digital signatures (but those are different than a MAC, they verify the identity of the sender). The MAC takes a shared secret as input, so it should only reveal anything to parties that possess that secret.