Re: Effect of signature on encrypted email

From: Henrick Hellström (henrick.hellstrm_at_telia.com)
Date: 08/04/03


Date: Mon, 04 Aug 2003 00:06:13 GMT

Mike Nugent wrote:
> Does anyone know how much easier having a constant email .sig makes analyzing
> an email encrypted with public key style crypto (such as gpg or pgp)? I would
> imagine that it would change it to a known plaintext attack.

It doesn't matter. With S/MIME you would anyway get at least as much
known or partly known information from the inner MIME headers and the
PKCS#7 format. Just use TripleDES or AES since they are commonly
believed to resist known plain text attacks. And don't forget to
digitally sign the message.



Relevant Pages

  • Effect of signature on encrypted email
    ... Does anyone know how much easier having a constant email .sig makes analyzing ... an email encrypted with public key style crypto? ... imagine that it would change it to a known plaintext attack. ...
    (sci.crypt)
  • Re: Effect of signature on encrypted email
    ... > Does anyone know how much easier having a constant email .sig makes analyzing ... > an email encrypted with public key style crypto (such as gpg or pgp)? ... > imagine that it would change it to a known plaintext attack. ...
    (sci.crypt)

Quantcast