Experts Warn New Bugs Could Expose PGP Emails

EFF Discovers Email Encryption Flaws

Earlier on Monday, the researchers issued an advisory recommending PGP and S/MIME users disable the encryption in their e-mail clients but had planned to wait until Tuesday to provide technical details of the vulnerabilities.

The warning comes from a group of security researchers in Europe, from Münster University, Ruhr-University, and KU Leuven University, and its members have previously revealed the Drown attack that affected some 11 million HTTPS sites back in 2016. There's now no fix, researchers said. They also warned that nation state agencies are known to eavesdrop on email communications.

PGP is a type of email encryption.

Pretty Good Privacy (PGP) is an encryption tool used to sign emails, documents, directories, and even full hard disks.

Academics from the Electronic Frontier Foundation have discovered critical vulnerabilities in two email encryption protocols.

"Our advice, which mirrors that of the researchers, is to immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email", the EFF said. The victim's email client then decrypts the email and loads any external content, thereby allowing the attacker to view the message.

Thousands forced from their homes as flooding hits BC Interior
The flood is the worst in Grand Forks since 1948. "It will be a gradual build over the next couple of days", he said. While electricity has been restored, Fortis B.C. personnel are surveying large areas that are still without gas.

If you use Thunderbird with Enigmail, Apple Mail with GPGTools or Outlook with Gpg4win the EFF has step-by-step tutorials to temporarily disable their PGP plug-ins.

The use of PGP for secure communications has been advocated, among others, by Edward Snowden, who blew the whistle on pervasive electronic surveillance at the US National Security Agency before fleeing to Russian Federation.

It added, however, that it considered the encryption standards themselves to be safe if correctly implemented and configured.

PGP, for example, works using an algorithm to generate a "hash", or mathematical summary, of a user's name and other information. The attacks assume that an attacker has possession of the encrypted e-mails and can trick either the original sender or one of the recipients to open an invisible snippet of one of the intercepted messages in a new e-mail.

To exploit the weakness, a hacker would need to have access to an email server or the mailbox of a recipient.

Related News:



Most liked

Sports Betting is Legal
New Jersey has lost several rulings along the way, and the case previously had not been heard by the Supreme Court in 2014. Trump's administration was on the opposite side of the case, opposing the New Jersey law championed by Christie.

Hmi Capital LLC Maintains Position in Summit Midstream Partners LP (SMLP)
Edge Wealth Management Limited Liability Com reported 0.74% of its portfolio in Magellan Midstream Partners, L.P. (NYSE:MMP). Benjamin F Edwards Co invested 0% in American Midstream Partners, LP prior to merger with JP Energy Partners LP (NYSE:AMID).

Rockets Owner's Casino Paying Out Warriors Bets
Seemingly overnight, Stephen Curry took that crown from Paul, winning his first of two consecutive MVP awards that season. On one side sits one of the most talented teams in league history, on the verge of being considered a dynasty.

US Anglican leader to give address at British royal wedding
The Episcopal Church is largely known as the United States branch of the Anglican Communion, which includes the Church of England. The Most Reverend Michael Bruce Curry said: "The love that has brought and will bind Prince Harry and Ms.

Gabriel Jesus victor takes 'magnificent' Man City past 100 points
Alright, Daniel, the boys and I have done our part for three straight seasons now. We can not be better in terms of numbers.

TMC workers barring voters from casting votes
They also accused the ruling Trinamool for unleashing a reign of terror during the nomination process for the polls. The State Election Commission has sought a report on the incident from the polling booth official .

Xerox terminated agreement to merge with Fujifilm, CEO resigns
The pair said they would be willing to consider any offers for the company of $40 a share or more. Fujifilm has said it's appealing a United States court injunction blocking the takeover.

Andre 3000 Just Surprise Dropped Two New Solo Tracks
The first track was written before his parents passed away, although it was recorded in 2015, after their passing. While "Me&My" features vocals from André, the other is an instrumental jazz collaboration with James Blake .

Webb Simpson extends lead as Tiger Woods, Jordan Spieth shoot 65
Woods and Spieth are tied for ninth along with Tommy Fleetwood, Ian Poulter, Harold Varner III, Matt Kuchar and Patrick Cantlay. Tiger said after getting -8 through 12, he had an eye on getting to -10 for the day, which would have been a course record.

Motorola Expands its Retail Presence in Telangana, Announces 50 New Moto Hubs
A few other renders of the Moto Z3 Play had surfaced in April as well, revealing specifications of the smartphone. While the volume rocker is placed on the right edge, the power button with textured finish is on the right edge.

Hamburg relegated, Dortmund in Champions League
The side haven't won consecutive league games since February, and the Hoffenheim defeat was their second in a row. Dortmund squeezed into the Champions League by finishing fourth on goal difference ahead of Bayer Leverkusen .

23 killed after heavy rain, dust storms lash parts of India
Delhiites woke up to a sunny morning with the mercury touching 40 degrees during the day but the sky turned cloudy around 4:30 pm. A person in Howrah district suffered serious injuries and was undergoing treatment at a local hospital, the official said.

Power leads IndyCar Grand Prix
I could not think of a better setting. "It is great to finally be on the podium this year". The Indianapolis 500 is the next race in the championship in a fortnight.

Mets' deGrom returns to face Phillies
Manager Mickey Callaway is still playing him everyday but after 27 games, he is only hitting.191 with 31 strikeouts in 89 at-bats. New York's pitching staff allowed 4.6 runs per game and its starting pitchers own a 4.44 ERA, 1.32 WHIP and 9.40 K/9.

Seven students killed, 9 missing as bridge collapses in Pakistan-occupied Kashmir
Police said eight of the rescued students were injured and airlifted to Muzaffarabad in a military helicopter for medical aid. The bridge which was located over the Jagran Nullah in Kundal Shahi area, collapsed as it could not withstand the pressure.