How does Efail work in PGP/GnuPg mail applications?

0

I would like to check my understanding of the reported Efail attacks on PGP / GPG mail applications. I have been reading https://efail.de/,

as well as this article by Phil Zimmerman: https://www.itpro.co.uk/encryption/31110/pgp-efail-security-flaw

I check if I understand correctly: Is the following example a good illustration of the Efail attack?

Example

to Recipient@abc.abc

$some mallicious code from the attacker$

-----BEGIN PGP MESSAGE-----

Ez0nOLk5U9jhOAPIvZscmtQzrsJp1HBXGudsukvjdoY=

...---...

-----END PGP MESSAGE-----

$or Some malicious code after the encrypted message$

In other words, is it true than if a PGP mailer ignores all text before and after the encrypted message, then it will not be affected by such attack?

Vivarto

Posted 2019-03-25T15:58:12.633

Reputation: 165

No answers