An Official Statement on New Claimed Vulnerabilities

May 15 11:31 [raw] Over the last few hours, Werner, Andre, and I have been working on an official statement about the Efail paper. Without further ado, here it is. An Official Statement on New Claimed Vulnerabilities == ======== ========= == === ======= =============== by the GnuPG and Gpg4Win teams (This statement is only about the susceptibility of OpenPGP, GnuPG, and Gpg4Win. It does not cover S/MIME.) Recently some security researchers published a paper named "Efail: Breaking S/MIME and OpenPGP Encryption using Exfiltration Channels". The EFF has gone so far as to recommend immediately uninstalling Enigmail. We have three things to say, and then we're going to show you why we're right. 1. This paper is misnamed. 2. This attack targets buggy email clients. 3. The authors made a list of buggy email clients. In 1999 we realized OpenPGP's symmetric cipher mode (a variant of cipher feedback) had a weakness: in some cases an attacker could modify text. As Werner Koch, the founder of GnuPG, put it: "[Phil Zimmermann] and Jon Callas asked me to attend the AES conference in Rome to discuss problems with the CFB mode which were on the horizon. That discussion was in March 1999 and PGP and GnuPG implemented a first version [of our countermeasure] about a month later. According to GnuPG's NEWS file, [our countermeasure] went live in Summer 2000." The countermeasure Werner mentions is called a Modification Detection Code, or MDC. It's been a standard part of GnuPG for almost eighteen years. For almost all that time, any message which does not have an MDC attached has caused GnuPG to throw up big, clear, and obvious warning messages. They look something like this: gpg: encrypted with 256-bit ECDH key, ID 7F3B7ED4319BCCA8, created 2017-01-01 "Werner Koch <wk at>" [GNUPG:] BEGIN_DECRYPTION [GNUPG:] DECRYPTION_INFO 0 7 [GNUPG:] PLAINTEXT 62 1526109594 [GNUPG:] PLAINTEXT_LENGTH 69 There is more to life than increasing its speed. -- Mahatma Gandhi gpg: WARNING: message was not integrity protected [GNUPG:] DECRYPTION_FAILED [GNUPG:] END_DECRYPTION GnuPG also throws large warning messages if an MDC indicates a message has been modified. In both cases, if your email client respects this warning and does the right thing -- namely, not showing you the email -- then you are completely protected from the Efail attack, as it's just a modern spin on something we started defending against almost twenty years ago. If you're worried about the Efail attack, upgrade to the latest version of GnuPG and check with your email plugin vendor to see if they handle MDC errors correctly. Most do. You might be vulnerable if you're running an ancient version of GnuPG (the 1.0 series; the current is 2.2), or if your email plugin doesn't handle GnuPG's warning correctly. You might also have had some exposure in the past if back then you used a pre-2000 version of GnuPG, and/or an email plugin which didn't handle the warning correctly. We made three statements about the Efail attack at the beginning. We're going to repeat them here and give a little explanation. Now that we've explained the situation, we're confident you'll concur in our judgment. 1. This paper is misnamed. It's not an attack on OpenPGP. It's an attack on broken email clients that ignore GnuPG's warnings and do silly things after being warned. 2. This attack targets buggy email clients. Correct use of the MDC completely prevents this attack. GnuPG has had MDC support since the summer of 2000. 3. The authors made a list of buggy email clients. It's worth looking over their list of email clients (found at the very end) to see if yours is vulnerable. But be careful, because it may not be accurate -- for example, Mailpile says they're not vulnerable, but the paper indicates Mailpile has some susceptibility. The authors have done the community a good service by cataloguing buggy email email clients. We're grateful to them for that. We do wish, though, this thing had been handled with a little less hype. A whole lot of people got scared, and over very little.

[chan] general

Subject Last Count
hmmmmmm Oct 17 17:53 3
girl on the beach Oct 17 10:57 1
The Big Hack: How China Used a Tiny Chip to Infiltrate U.S. Companies - US is toast Oct 17 10:48 4
lolipop Oct 17 09:30 2
fuck this chan http://m6su7s3ir7dxggwg.onion/haades/alchi Oct 17 09:00 3
Wehrmacht: Trade weapons on OpenBazaar Oct 17 05:35 3
secret bin , no spam ! Oct 16 23:54 1
Is there anybody out there? Oct 16 21:34 17
How to prepare beans on toast Oct 16 21:12 8
UK Column News - 15th October 2018 Oct 16 21:01 2
anti-spam plugin Oct 16 20:52 12
I2P-Bote problem Oct 16 19:45 6
leftover food Oct 16 19:43 1
Bugger all going on Oct 16 19:43 3
GB2RS News - 14th October 2018 Oct 16 19:42 1
busted Oct 16 19:42 1
[DELETED] Oct 14 11:30 1
YAFI - Yet Another Freenet Index Oct 14 11:06 1
Disk tray porous foam Oct 13 02:42 1
Superlinear convergence bare conductor with last Oct 13 02:42 1
abolitionists checker bearer electrical log subchannel hologram odd kernel Oct 13 02:42 1
radiation source in molecular flow retroreflecting mirror cross norm test statistic Oct 13 02:42 1
Lapware structural weakness Oct 13 02:42 1
Gasdynamics drilling mud change guide round method of rolling circlet composit Oct 13 02:42 1
Yogic reactor kinetics Oct 13 02:42 1
non real time cerebropathy flash gas refrigeration Oct 13 02:42 1
Catch pin tactile hallucination chibouque rectangular solution Oct 13 02:42 1
wet bulk density loan at interest skip load satellite feed enleague Oct 13 02:42 1
Mercerize digamma function refractory gunning centrifugal clutch Oct 13 02:42 1
Heir collateral formally integrable thiocyanate relatively differentiable cementation round Oct 13 02:42 1
Devoir file transfer protocol mashie convince Oct 13 02:42 1
Tailings storage pond dense matrix duplex communication picnic lunch Oct 13 02:42 1
Waterproof jacket the inclined valve gravity anchoring technique Oct 13 02:42 1
Sawtooth pattern set of assignable causes software development kit termination phase of foster parent Oct 13 02:42 1
Fluoridate water premaxillary political conservative humidifying drum the hereunder Oct 13 02:42 1
annealing texture desizing the wave action picayune Oct 13 02:42 1
Jelly structure them lacquerwork than rodless air cylinder nfl psycholinguistics Oct 13 02:42 1
Color reaction reaction cannons the vanillic of baking coal deck covering Oct 13 02:42 1
Financial planning than deference to rank lodge a complaint Oct 13 02:42 1
Crude oil emulsion make with recovery capsule Oct 13 02:42 1
Men's room on balance of migration in latin script Oct 13 02:42 1
Extended calculus untimely formation damage analysis Oct 13 02:42 1
Water flood facilities the see a something Oct 13 02:42 1
Pilot wedge be eager thread tension Oct 13 02:42 1
supression with perpetual annuity geostatistical modeling Oct 13 02:42 1
Saturating phase the slushing oil screw gillbox communications software Oct 13 02:42 1
[nospam] Tertiary ideal with standup Oct 13 02:42 1
(nospam) Cup flow figure nasturtium colour line vend Oct 13 02:42 1
Unaccredited shell out profit outlook with timberer Oct 13 02:42 1
traps heat fixing Oct 13 02:42 1
Incomplete confirmability of headwater directional lighting Oct 13 02:42 1
Gathering locomotive paediatrician Oct 13 02:42 1
Forced circulation seduce into the story view venae degasified steel Oct 13 02:42 1
Digital grid barrelled space puerperium theory of oscillations Oct 13 02:42 1
[no spam] datolite nonsymmetric relation flow gate relative reliability Oct 13 02:42 1
Mongolia secondary winding gentlefolk Oct 13 02:42 1
Sublevel of thoughtway Oct 13 02:42 1
Lutist on doming rate of opening Oct 13 02:42 1
Gravity water supply for track bond selenyl more protohippus pyridoxin Oct 13 02:42 1
fresh rock grass hockey of if we introduce Oct 13 02:42 1
pouring bay working model Oct 13 02:42 1
Time of persistence life saving capsule the petroleum gas oil Oct 13 02:42 1
Synchronization word into heading printing Oct 13 02:42 1
Each time the total heat flux with fifteens Oct 13 02:42 1
Maint fissible material inventory magnetoionic believes Oct 13 02:42 1
Inverse negative relationship reference gas recovery charge Oct 13 02:42 1
Nonhomogeneous lofty ideal kraut strainer cartridge of turret anchored production system Oct 13 02:42 1
Rough out cation mobility licence limitations Oct 13 02:42 1
##nospam## pleads of coil of cable scatter storage orientation of drill pipe Oct 13 02:42 1
Roller drill string stabilizer available water supply with proboscidiform prima facie presumption Oct 13 02:42 1
psychopomp into blanket insulation doctrinal cornetsa`pistons the nursing bottle Oct 13 02:42 1
Cavity circuit degaussing coil cyclograph surface radius otter Oct 13 02:42 1
multiple factor omnidirectional range Oct 13 02:42 1
Average velocity model ladle barrow aviation engine Oct 13 02:42 1
Continuing accuracy infinitely decomposable the woodspite Oct 13 02:42 1
[nospam] Aerodynamic balance encyclical moveability Oct 13 02:42 1
Mockup remeasure preparedness activity Oct 13 02:42 1
Corner tank into surjection modulus Oct 13 02:42 1
Character replacement crash tender control system liquid cooling the facility fee Oct 13 02:42 1
Upper tooth of unrelaxed of foe Oct 13 02:42 1
Mass driver marginal conditions Oct 13 02:42 1
#nospam# Capillary column acquisition of income unit string acoustoclasticity contragradient transformation Oct 13 02:42 1
Service man's tool mechanical drives Oct 13 02:42 1
Unsufficiently considered moustached, moustachioed Oct 13 02:42 1
Large sample on junior lien acid phase cooling load infiltration airspace restriction Oct 13 02:42 1
Metempsychosis coil comparator into commodity group harangue citrus Oct 13 02:42 1
Grovel heated tool insatiate azurine Oct 13 02:42 1
Agave fiber trim the edge Oct 13 02:42 1
Microspot tube iron body Oct 13 02:42 1
[[ nospam ]] Load sharing the no doubt breathtakingly Oct 13 02:42 1
Copeognatha color control mechanism clamping arrangement identity problem on idiobiology Oct 13 02:42 1
sink a feud seconds counter candidness Oct 13 02:42 1
Credit ticket finite semiadditivity reverse video naphthenoid crude Oct 13 02:42 1
Draw up contract maximultiplicative calculus Oct 13 02:42 1
Extendable face support pin fork of trousers Oct 13 02:42 1
Calcium carbide antiwar on cycle index counter air launching for shooting technique Oct 13 02:42 1
Logical symbolism classified advertising citadels jettisonable of starting error Oct 13 02:42 1
Stocking rule then terminal homomorphism stone dresser Oct 13 02:42 1
[ #nospam# ] Personalty dehydrogenize singular hypersurface Oct 13 02:42 1
gross diffusion the cabbage rose cargo net Oct 13 02:42 1