Experts Warn New Bugs Could Expose PGP Emails

PGP is leaking your emails in plaintext and there's no known fix

Earlier on Monday, the researchers issued an advisory recommending PGP and S/MIME users disable the encryption in their e-mail clients but had planned to wait until Tuesday to provide technical details of the vulnerabilities.

The warning comes from a group of security researchers in Europe, from Münster University, Ruhr-University, and KU Leuven University, and its members have previously revealed the Drown attack that affected some 11 million HTTPS sites back in 2016. There's now no fix, researchers said. They also warned that nation state agencies are known to eavesdrop on email communications.

PGP is a type of email encryption.

Pretty Good Privacy (PGP) is an encryption tool used to sign emails, documents, directories, and even full hard disks.

Academics from the Electronic Frontier Foundation have discovered critical vulnerabilities in two email encryption protocols.

"Our advice, which mirrors that of the researchers, is to immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email", the EFF said. The victim's email client then decrypts the email and loads any external content, thereby allowing the attacker to view the message.

Germany: US' Iran sanctions could stymie Europe
The deal is crucial for regional stability and maintaining the non-proliferation of mass destruction weapons regime, Lavrov said. Their concerns seem to be well-founded, as Germany's foreign minister has said it will be hard to protect them.

If you use Thunderbird with Enigmail, Apple Mail with GPGTools or Outlook with Gpg4win the EFF has step-by-step tutorials to temporarily disable their PGP plug-ins.

The use of PGP for secure communications has been advocated, among others, by Edward Snowden, who blew the whistle on pervasive electronic surveillance at the US National Security Agency before fleeing to Russian Federation.

It added, however, that it considered the encryption standards themselves to be safe if correctly implemented and configured.

PGP, for example, works using an algorithm to generate a "hash", or mathematical summary, of a user's name and other information. The attacks assume that an attacker has possession of the encrypted e-mails and can trick either the original sender or one of the recipients to open an invisible snippet of one of the intercepted messages in a new e-mail.

To exploit the weakness, a hacker would need to have access to an email server or the mailbox of a recipient.

Related News:

  • Hmi Capital LLC Maintains Position in Summit Midstream Partners LP (SMLP)

    Edge Wealth Management Limited Liability Com reported 0.74% of its portfolio in Magellan Midstream Partners, L.P. (NYSE:MMP). Benjamin F Edwards Co invested 0% in American Midstream Partners, LP prior to merger with JP Energy Partners LP (NYSE:AMID).
    Power leads IndyCar Grand Prix

    Power leads IndyCar Grand Prix

    I could not think of a better setting. "It is great to finally be on the podium this year". The Indianapolis 500 is the next race in the championship in a fortnight.
    Seven students killed, 9 missing as bridge collapses in Pakistan-occupied Kashmir

    Seven students killed, 9 missing as bridge collapses in Pakistan-occupied Kashmir

    Police said eight of the rescued students were injured and airlifted to Muzaffarabad in a military helicopter for medical aid. The bridge which was located over the Jagran Nullah in Kundal Shahi area, collapsed as it could not withstand the pressure.
  • Sports Betting is Legal

    Sports Betting is Legal

    New Jersey has lost several rulings along the way, and the case previously had not been heard by the Supreme Court in 2014. Trump's administration was on the opposite side of the case, opposing the New Jersey law championed by Christie.
    Jose Mourinho: 'Difficult to motivate Manchester United players'

    Jose Mourinho: 'Difficult to motivate Manchester United players'

    But there was still a moment to remember late on as Carrick's 464th United appearance came to a close, receiving a standing ovation as he was replaced by Paul Pogba on a day that belonged to one of the club's most distinguished servants.
    Thousands forced from their homes as flooding hits BC Interior

    Thousands forced from their homes as flooding hits BC Interior

    The flood is the worst in Grand Forks since 1948. "It will be a gradual build over the next couple of days", he said. While electricity has been restored, Fortis B.C. personnel are surveying large areas that are still without gas.
  • Iran official says Europe has 60 days to give nuclear 'guarantees'

    Iran official says Europe has 60 days to give nuclear 'guarantees'

    The International Atomic Energy Agency (IAEA) has repeatedly confirmed that Tehran has been meeting its nuclear commitments fully. European signatories have undertaken a flurry of diplomatic activity to try to protect trade deals worth billions.
    Xerox terminated agreement to merge with Fujifilm, CEO resigns

    Xerox terminated agreement to merge with Fujifilm, CEO resigns

    The pair said they would be willing to consider any offers for the company of $40 a share or more. Fujifilm has said it's appealing a United States court injunction blocking the takeover.
    Benitez calls for united front at Newcastle

    Benitez calls for united front at Newcastle

    Chelsea, Tottenham and West Ham have all been linked, but Benitez is hoping to fend off interest. "It was pretty much a flawless Sunday".
  • Constantin Sets September Shoot for Paul WS Anderson's 'Monster Hunter'

    Constantin Sets September Shoot for Paul WS Anderson's 'Monster Hunter'

    Variety reports that Milla Jovovich is set to star in the upcoming film adaptation for the Monster Hunter video game franchise. Constantin Film is otherwise funding the film itself. "Paul has proven over and over he does stylish movies", he added.
    Patent application hints that Microsoft's folding phone could have three screens

    Patent application hints that Microsoft's folding phone could have three screens

    While a report states that Microsoft may be planning to introduce maintenance for Win32 applications for the foldable smartphones. It was approved earlier in March of this year and what you're seeing in the images are similar to the prototype before.
    Roberto Mancini Steps Down as Zenit Manager as Italy Job Beckons

    Roberto Mancini Steps Down as Zenit Manager as Italy Job Beckons

    Gallen, Switzerland on May 28 before matches against two more Russia-bound teams France and the Netherlands early next month. Roberto Mancini is expected to be announced as Italy head coach by Wednesday, according to Sky.


Most liked

US Anglican leader to give address at British royal wedding
The Episcopal Church is largely known as the United States branch of the Anglican Communion, which includes the Church of England. The Most Reverend Michael Bruce Curry said: "The love that has brought and will bind Prince Harry and Ms.

Gabriel Jesus victor takes 'magnificent' Man City past 100 points
Alright, Daniel, the boys and I have done our part for three straight seasons now. We can not be better in terms of numbers.

Mercedes-AMG GT S Roadster revealed
A sprint from standstill to 100km/h is absolved in 3.8 seconds and the GT S Roadster can accelerate all the way up to 308km/h . Mercedes say the AMG GT S Roadster can already be ordered from dealers, although there's no official price yet.

NES Classic Edition making a comeback next month
The micro-console will include one NES Classic Controller, an HDMI cable, and an AC adapter. The new shipment of NES Classic consoles will be hitting store shelves on June 29th, 2018.

TMC workers barring voters from casting votes
They also accused the ruling Trinamool for unleashing a reign of terror during the nomination process for the polls. The State Election Commission has sought a report on the incident from the polling booth official .

Softbank May Invest Whopping $3 Bn in Paytm Mall, Thanks To Flipkart
SoftBank had alone pumped in over $5 billion in four companies including Paytm, Oyo, Flipkart, and Ola. SoftBank will get around $4 billion if it sells its entire 21 per cent stake in Flipkart.

IPL 2018: MI vs RR Preview
Mumbai Indians , on a roll lately, are back on their home turf to face Rajasthan Royals on Sunday evening. He had two fruitful partnerships with Ajinkya Rahane (37 off 36) and Sanju Samson (26 off 14).

Andre 3000 Just Surprise Dropped Two New Solo Tracks
The first track was written before his parents passed away, although it was recorded in 2015, after their passing. While "Me&My" features vocals from André, the other is an instrumental jazz collaboration with James Blake .

Motorola Expands its Retail Presence in Telangana, Announces 50 New Moto Hubs
A few other renders of the Moto Z3 Play had surfaced in April as well, revealing specifications of the smartphone. While the volume rocker is placed on the right edge, the power button with textured finish is on the right edge.

India responsible for slow pace of 26/11 trial: Pak ex-minister
Sharif, who has been disqualified to hold public office for life by the Supreme Court in the Panama Papers case, said Pakistan has isolated itself.

23 killed after heavy rain, dust storms lash parts of India
Delhiites woke up to a sunny morning with the mercury touching 40 degrees during the day but the sky turned cloudy around 4:30 pm. A person in Howrah district suffered serious injuries and was undergoing treatment at a local hospital, the official said.

Duke of Edinburgh appears ready for royal wedding after hip surgery
The Royal Windsor Horse Show is the largest outdoor British horse show taking place over the course of several days. The 96-year-old appeared cheerful, chatty and in good health following a major hip operation just five weeks ago.

Abadi leading in election, Sadr strong
The constitution sets a quota for female representation, stating that no less than one-fourth of parliament members must be women.

Neymar Voted Player Of Season In France
And the Ligue 1 champions have identified the Red Devils star as a ideal replacement for current world record player. The Spanish media are against French clubs and they've been talking about things since October.

Liverpool nab CL spot, Swansea relegated from EPL
The old record was held by Liverpool , who collected 98 points in the 1978-79 season (adjusted to three points for a win). The only trouble for them now is repeating the same thing for next season.