[openpgp] Re: PQC requires urgent semantic cleanup

On 2 Dec 2025, at 20:03, Daniel Huigens <[email protected]> wrote:
> 
> If they come back and see the YubiKey still
> in place, they may be confident that the key material is still secure,
> but it may theoretically have been used to sign emails on their behalf
> in the past month.

It may also have been used to sign post-dated or back-dated messages during the hole. If you lose control of your private key material, even temporarily, your only defence (cryptographically speaking) is hard revocation. We should not imply or encourage any other belief.

A
_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]