PGP Key Validity Attack

Posted by michael on Tuesday September 4, 2001 @04:34AM from the key-to-the-city dept.

Sieuwert van Otterloo writes: "I have discovered a new attack on PGP. It allows one to introduce an invalid key as valid in the network of trust. All information is on www.bluering.nl/pgp. Network Associates has confirmed the problem and made a patch. The attack is officially published in a talk at the university of Utrecht this afternoon, (4 september 15:00 CET)." Network Associates has a page up, and patches.

0 of 5 comments (clear)