Re: "The OpenPGP mail and news header" extenssion

[Ben Laurie <ben@xxxxxxxxxxxxx>]

Jeroen Massar wrote:
> On Sun, 2005-08-14 at 16:30 +0100, Ben Laurie wrote:
>
> > Jeroen Massar wrote:
> >
> > > On Sun, 2005-08-14 at 14:24 +0100, Ben Laurie wrote:
> > >
> > >
> > > > Jeroen Massar wrote:
> > >
> > > <SNIP>
> > >
> > > > > * sign(encrypt(message))
> > >
> > > <SNIP>
> > >
> > > > More importantly, perhaps, Krawczyk has shown that, in general, sign 
> > > > then encrypt is insecure.
> > >
> > >
> > > Which exact paper do you mean?
> >
> > http://eprint.iacr.org/2001/045
>
>
> Which nicely says, already in the abstract btw, "Thus, while we show the
> generic security of SSL to be broken, the current standard
> implementations of the protocol that use the above modes of encryption
> are safe."

Sure. What does this have to do with OpenPGP's security?

--
>>>ApacheCon Europe<<<                   http://www.apachecon.com/

http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff