Fix false positives in gpg format (symmetric encryption)
Open
@kholia is already working on this.
Since Nov 11, 2017.
enhancement
non-trivial
RFC / discussion
- Dominant language
- C
- Stars
- 13.6k
- Forks
- 2.6k
- PR merge metrics
- No merged PRs in 30d
Description
Currently, cracking of GPG symmetrically encrypted files lacking "MDC" results in a lot of false positives.
http://www.ssi.gouv.fr/uploads/2015/05/format-Oracles-on-OpenPGP.pdf should be of help.
https://www.reddit.com/r/crypto/comments/ujot7/gpg_dont_know_invalid_packet_ctb48/
http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=blob_plain;f=doc/DETAILS
http://www.ietf.org/rfc/rfc1991.txt
https://github.com/hawken93/gpg-symcrack (based on GnuPG itself)
Format Oracles on OpenPGP paper (backup copy).
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.