Collision attack against long Key Ids

Nombre y Apellidos via Gnupg-users <[email protected]> Wed, 11 Mar 2026 17:57:04 +0100

Newsgroups	gmane.comp.encryption.gpg.user
Message-ID	<[email protected]>

Hello

I'm a GPG user for a while, but I don't have any technical knowledge of
cryptography, only basic understanding of the subject. I mention this to
try and excuse my lack of knowledge.

I see a blog post about collisions in key Id's in this blog:
https://soatok.blog/2026/01/07/practical-collision-attack-against-long-key-ids-in-pgp/

According to the article itself, it can lead to cases of usurpation of
signed data, such as software packages.

Is it really a weakness in PGP/GNUPG?

Best regards and thanks in advanced

-- 
OpenPGP fingerprint
-------------------
CBA7 480A 5FBC DB67 857F 54D3 434C 945C 1278 2FD7

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

signature.asc (application/pgp-signature, 833 B)