Home GnuPG
Diffusion GnuPG 625e292108cc

gpg: Fail decryption for AES etc message w/o MDC.
625e292108ccUnpublished

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

Description

gpg: Fail decryption for AES etc message w/o MDC.

* g10/mainproc.c (proc_encrypted): Fail for modern messages w/o MDC.

This change turns the missing MDC warning into an error if the message
has been encrypted using a cipher with a non-64 bit block length cipher
and it is not Twofish.

We can assume that such messages are created by code which should have
been able to create MDC packets. AES was introduced with 1.0.3 on
2000-09-18 shortly after MDC (1.0.2 on 2000-07-12). We need to
exclude Twofish because that might have been used before MDC.

  • Signed-off-by: Werner Koch <wk@gnupg.org>

Details

Provenance
wernerAuthored on Oct 6 2015, 9:40 AM
Parents
rG4a5bd1720f5a: agent: Fix verification of signature for smartcard.
Branches
Unknown
Tags
Unknown

Event Timeline

Werner Koch <wk@gnupg.org> committed rG625e292108cc: gpg: Fail decryption for AES etc message w/o MDC. (authored by Werner Koch <wk@gnupg.org>).Oct 6 2015, 9:44 AM