Re: Adding a nonce before hashing as covert channel
Werner Koch via Gnupg-devel <[email protected]>
| Newsgroups | gmane.comp.encryption.gpg.devel |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 18 Dec 2024 11:30, Andrew Gallagher said: > LibrePGP is a specification agreed upon by *two* implementations. If > you arbitrarily include RNP (i.e. Thunderbird) but not openpgp.js > (i.e. Protonmail, Mailvelope, FlowCrypt) in the “major real world Web stuff which can be replaced in the blink of an eye. Nothing which needs complicated consideration for deployment. Interoperability is not about the number of implementations but about deployed implementations and infrastructure. BTW, the third player are all the big "commercial" and in-house applications which are neither using the old PGP, or RNP, or GnuPG but are using BouncyCastle which supports the LibrePGP specification (or name it rfc4880bis) for many years. Salam-Shalom, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein _______________________________________________ Gnupg-devel mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-devel
openpgp-digital-signature.asc
(application/pgp-signature, 247 B)
-----BEGIN PGP SIGNATURE----- iIMEARYIACsWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCZ2Le5g0cd2tAZ251cGcu b3JnAAoJEBnMHJ4IWxB6YDQA/2ZoCw8oc6TITpvM/mr42WyLAi5G4k9Cp/ruOQf/ /scxAQCLqWkbmkLSHbjEhY9M6XeJK3pN1bAVv+JC4fX6sp15Cg== =uCnr -----END PGP SIGNATURE-----