Re: PGP II

scusate se posto in ritardo il reply..
http://www.i.cz/en/onas/tisk4.html -> in alto a destra c'e' una data (Prague, 20.3.2001)
http://www.i.cz/onas/nytimes2.html -> questa volta e' in alto a sinistra (March 23, 2001)
quindi in risposta al tuo dubbio: la notizia non e' nuova!:P

se vuoi saperne di piu' http://www.pgpi.org/news/#20010324
"[24 Mar 2001] Security flaw in OpenPGP key format
A Czech information security firm has found a security flaw in the OpenPGP key format, as used by PGP, GnuPG and other PGP
implemenations. The flaw makes it possible for an attacker to forge a PGP signature if he/she can get hold of your private key, even
if he/she doesn't know the pass phrase. For more information, see the press release, the technical paper and this Wired article."

http://www.i.cz/en/pdf/openPGP_attack_ENGvktr.pdf
http://www.wired.com/news/print/0,1294,42553,00.html
http://www.i.cz/en/onas/tisk4.html

ovviamente e' stato rilasciato a breve un hot fix
http://www.pgpi.org/news/#20010420

se usi pgp 7.0.3 ricordati anche di installare un altro hot fix rilasciato per un'altra vulnerabilita'! (trovi tutto su
http://www.pgpi.org/news/)
i files sono qua
http://www.pgpi.org/products/pgp/versions/freeware/win32/7.0.3/

Mauro.


________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List