0

I would like to check my understanding of the reported Efail attacks on PGP / GPG mail applications. I have been reading https://efail.de/,

as well as this article by Phil Zimmerman: https://www.itpro.co.uk/encryption/31110/pgp-efail-security-flaw

I check if I understand correctly: Is the following example a good illustration of the Efail attack?

Example

to Recipient@abc.abc

$some mallicious code from the attacker$

-----BEGIN PGP MESSAGE-----

Ez0nOLk5U9jhOAPIvZscmtQzrsJp1HBXGudsukvjdoY=

...---...

-----END PGP MESSAGE-----

$or Some malicious code after the encrypted message$

In other words, is it true than if a PGP mailer ignores all text before and after the encrypted message, then it will not be affected by such attack?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.