|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] PGP ADK Vulnerability.
|
Vik Bajaj wrote:
> For full advisory, please see:
>
> http://www.vikbajaj.com/security/incident/august-25/
>
It's important to note that the above advisory and "bug fix" only addresses the
(quite justified) concern that an ADK can be hacked out of the PGP key. It does
*not* correct the fact that the ADK exists. It appears to me that an ADK could
still be surruptitiously added to your PGP key without your knowledge at creation
time.
Could someone with a decent knowledge of encryption technology address this
concern, please?
Hey! I smell a user-group topic! Anyone? Anyone?
--
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GMU/PA/CS/IT d s+:++ a C++ UL++>$ P+ L++>++++ E W++ N++ o-- K w---$ O
M+ V--- PS+ PE Y+ PGP- t+ 5-- X R* tv-- b++ DI++ D+ G++ e+ h--- r+++ y++++
-----END GEEK CODE BLOCK-------
For translation, see http://www.kluge.net/ungeek.html
______________________________________________________________________
Philadelphia Linux Users Group - http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion - http://lists.phillylinux.org/mail/listinfo/plug
|
|