Re: Retrospective by 'gpg.fail' authors
Peter Gutmann replies to gpg.fail retrospective, pointing to PGP's arbitrary packet format as root of many past vulnerabilities.
Peter Gutmann posted a follow-up on oss-security referencing an Hacker News discussion of the gpg.fail authors' retrospective. The thread argues that a recurring source of severe PGP vulnerabilities is the format's permissive packet system, where a PGP message is a practically arbitrary stream of packets. This is discussion and retrospective analysis rather than a new disclosure.
- Mailing-list reply discussing PGP packet-format design weaknesses
- References gpg.fail retrospective and Hacker News thread
- No new vulnerability or CVE disclosed in the reply
From the original article
Posted by Peter Gutmann on Sep 13 Sam James writes: https://news. ycombinator. com/item?
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.