S/MIME and PGP Email Encryption Flaws Affecting Millions Discovered by EFF

EnlargeElsamuko

The researchers have already contacted email service providers through the Electronic Frontier Foundation.

The EFF has issued detailed tutorials on how to disable PGP encryption in the major email clients such as Outlook and Apple Mail. "If you use PGP/GPG or S/MIME for very sensitive communication, you should disable it in your email client for now", Schinzel wrote in a tweet.

Academics from Münster University of Applied Sciences, along with their peers at Ruhr University Bochum, and KU Löwen in Belgium, said they were able to break two types of encryption that until now were so secure that even intelligence agencies couldn't penetrate.

A second Tweet warns "There are now no reliable fixes for the vulnerability".

Werner Koch, principle author of GnuPG, described the issue as "overblown" by the EFF in a blog post today.

A newly-discovered software vulnerability means it may be possible to read encrypted emails sent in the past.

Another way would be to use authenticated encryption via tools such as OpenPGP, he argued. Users are advised to disable the following email encryption add-ons: Gpg4win for Outlook, Enigmail for Thunderbird and GPGTools for Apple Mail.

According to encryption software GNU Privacy Guard (GnuPG), the problem comes from email programs that fail to check for decryption errors properly and follow links in emails that included HTML code.

Though researchers are warning users of the seriousness of the vulnerability, many believe it is being hyped too much.

PGP is used by activists, journalists and whistleblowers, including Edward Snowden, who revealed details of pervasive electronic surveillance by USA intelligence agencies before fleeing to Russian Federation. In the meantime, they are recommending that users stop using OpenPGP and S/MIME for now. Dmitri Strukov, a professor of electrical and computer engineering at the University of California, and his team are working to put an additional security measure on internet-connected devices to prevent hackers from cloning them. The researchers claim the chip is unclonable, and thus, protects the device from hacking, replication or counterfeiting by the hackers.

Related News:



Most liked

Huge Win For Sports Betting as New Jersey Wins Supreme Court Decision
All four major USA professional sports leagues, the NCAA and the federal government had urged the court to uphold the federal law. New Jersey residents first approve a referendum to legalize sports betting in the state in November 2011.

Fans want Priyanka Chopra to play Pakistani-Muslim superhero Ms Marvel
In the comics Ms Marvel's alter-ego is Kamala Khan , a Pakistani American teenager from New Jersey. Marvel was introduced in the comics in 2013 before getting her own solo series in 2014.

Asteroid Possibly Longer Than Football Field Will Soon Have Near-Earth Encounter
On May 8, after nearly eight years, astronomers found an asteroid, which they eventually figured out was the returning 2010 WC9. This would reportedly be the 2 time in thirty days for an asteroid body to fly at this proximity to our planet.

Italy set to name Roberto Mancini as new national team coach
Mancini is thought to have become the Italian Football Federation's preferred candidate after being turned down by Carlo Ancelotti.

Time travellers have been invited to attend Stephen Hawking's memorial service
Westminster Abbey will also be open to the public free of charge after the service so people can pay their respects at his grave. Anything is possible until proven otherwise", said one representative of the Stephen Hawking Foundation.

NES Classic Will Be Back in Stock This June
You don't need to worry about finding space to store all 30 of the games either: They're installed directly on the console. Just like the NES Classic, many websites resold the Super NES Classic for far greater than the MSRP of $79.99.

West Bengal Panchayat Polls On Monday
Trinamool Congress ( TMC ) workers on Monday were seen barring voters from entering booth no. 14/79 in West Bengal's Birpara town. Twenty people were injured in a low-intensity blast at a polling station at Shuktabari in north Bengal's Coochbehar district.

IPL 2018, MI vs RR: Lewis, Pandya lift MI to 168
As was the case with Mumbai , Rajasthan too slowed down as the ball got softer and the boundaries were hard to come by. Today is the 47th match of the IPL 2018 and between Mumbai Indians and Rajasthan Royals ( MI vs RR Today IPL Match ).

Tiger Woods rediscovers magic at Players Championship
Woods and Spieth are tied for ninth along with Tommy Fleetwood, Ian Poulter, Harold Varner III, Matt Kuchar and Patrick Cantlay. Tiger Woods teed off when the leaders were having breakfast prior to the third round of Saturday's Players Championship .

Newcastle owner Ashley insists Benitez will receive total market support
At the moment it is a day to enjoy. "Then we can go to any stadium and think about going to win, rather than thinking that a draw might be a good result".

Iraq awaits results of landmark parliamentary election after low turnout
Sadr has led two uprisings against US forces in Iraq and is one of the few Shi'ite leaders to distance himself from Iran. Sadr's father, highly respected Grand Ayatollah Mohammed Sadeq Al Sadr, was murdered in 1999 for defying Saddam Hussein.

100 points? I can not believe it - Guardiola marvels at super City
The old record was held by Liverpool , who collected 98 points in the 1978-79 season (adjusted to three points for a win). And in our minds, you know, it's already over.

Will Power triumphs in tense IndyGP thriller, claims 200th Penske win
He has started in the top four in each of the first four rounds of the season but has run into problems in three of those races. Will Power , who had pole position in the race, came in first, sealing his second straight Grand Prix victory.

Nick Williams powers Phillies past Mets to salvage series split
The New York Mets made it clear on Sunday that they are taking great precautions with their handling of Jacob deGrom . Phillies manager, Gabe Kapler , was on his way to being run out of town and Callaway could do no wrong for the Mets.

20 tourists swept away in Neelum Valley bridge collapse
Police officials stated that 25 tourists tried to take clicks on a bridge, located over the Jagran Nullah in Kundal Shahi area. However, tourists ignored the warning signs and bridge collapsed resulting in five deaths.