VULHUB ™

The OpenPGP Message Format Standard provides information on the message-exchange packet formats used by OpenPGP to provide encryption, decryption, signing, and key management functions. Many of the techniques described in the standard have been adopted into widely-used public key encryption programs. Two cryptologists, Vlastimil Klima and Tomas Rosa, have found a flaw in the OpenPGP key format which could make it possible for an adversary to forge a PGP signature using a victim's private key without knowing the pass phrase for that key.

The OpenPGP Message Format Standard provides information on the message-exchange packet formats used by OpenPGP to provide encryption, decryption, signing, and key management functions. Many of the techniques described in the standard have been adopted into widely-used public key encryption programs. Two cryptologists, Vlastimil Klima and Tomas Rosa, have found a flaw in the OpenPGP key format which could make it possible for an adversary to forge a PGP signature using a victim's private key without knowing the pass phrase for that key.