Search Articles

Search Results: GnuPG

To Sign or Not to Sign: Uncovering Practical Vulnerabilities in GPG and Related Tools

To Sign or Not to Sign: Uncovering Practical Vulnerabilities in GPG and Related Tools

A deep dive into recently discovered vulnerabilities in popular PGP implementations like GnuPG, Sequoia PGP, age, and minisign reveals implementation flaws that could undermine cryptographic security. These bugs, rooted in parsing errors rather than cryptographic math, pose risks from signature bypasses to memory corruption. Presented at the 39th Chaos Communication Congress, the findings highlight the ongoing challenges in securing mature cryptographic codebases.

PGP: The Cryptographic Relic That's Putting Security at Risk

PGP, once a gold standard for encryption, is riddled with outdated design flaws that compromise security in the modern era. Cryptography experts argue it's time to abandon it for purpose-built alternatives like Signal and Age, citing decades of unaddressed vulnerabilities and usability failures.