PGP source code

[Nexus]

As if by magic, the Shopkeeper appeared...

JJ


------- Forwarded Message

From: "teun Tilburg University" <Teun.Nijssen@kub.nl>
To: pgp-users@cryptorights.org
Date: Mon, 3 Sep 2001 22:05:29 +0200
Subject: Re: [PGP-USERS] Another Flaw in PGP found.
CC: pgp-users@cryptorights.org
Sender: pgp-users-admin-human@cryptorights.org
Reply-To: pgp-users@cryptorights.org

Hi,

>  -----BEGIN PGP SIGNED MESSAGE-----
>  Hash: SHA1
>
>   It seems a programer has found another security flaw
>  in PGP. Details tomorrow and the web page is at:
>  http://www.security.nl/artikel.php3?id=2293 if you read Dutch.

I do; that's the one I refered to.....

Rough translation:

GT writes: Earlier you have been able to read about the thesis of
Swietert van Otterloo. S has, during his graduation research found an
exploitable bug in the popular email-security program PGP. The
existence of the bus has een confirmed by NAI, the producer of PGP, who
will provide a patch on the day of the lecture.

Thus, S can divulge on 4 sep how he found the bug and how it works.  He
will also tell about some earlier bugs in PGP. The vulnerability is
about the "network of Trust" that must in PGP ensure that a users has
the right public keys of other users. The vulnerability allows an
attacker to create a key and to introduce it into a keyring with
another name. S's lecture is interesting to people who are involved in
computer security, crypto and software engineering.

Time:   Tuesday 4 Sep 15:00 (that's 11:00 AM EDT)
Title: Titel A security analysis of Pretty Good Privacy



....................................................................
Unsubscribe: <mailto:pgp-users-listbot@cryptorights.org?body=unsubscribe>
Automated Help/Info: <mailto:pgp-users-listbot@cryptorights.org?body=help>
List Homepage: <http://cryptorights.org/pgp-users/>
List Admin (human): <mailto:pgp-users-admin-human@cryptorights.org>
Please do not send administrative commands to the list address!  Thanks.

------- End of Forwarded Message