Flaw Found in PGP
This is taken directly from the link below.
A bug has been found in worldwide used security format OpenPGP. The bug can lead to discovery of user's
private keys used in digital signature systems. OpenPGP format is widely used in many applications used
worldwide, including extremely popular programs like PGPTM, GNU Privacy Guard, and others. The bug
detection comes on the right time, as Philip Zimmermann, the creator of PGP program, has left Network
Associates, Inc. and aims to boost OpenPGP format in other products for privacy security on Internet.
From the scientific point of view, the discovery goes far beyond actual programs - it has wider theoretical
and practical impact.
Two Czech cryptologists, Vlastimil Klima and Tomas Rosa, from a company Decros (member of ICZ
group) detected insufficient security protection of private signature keys while working on a research for
the Czech National Security Authority. The private signature key is the most sensitive and therefore the
most protected information in all digital signature systems. The attack is described in detail in a research
report to be released shortly on Internet (http://www.i.cz) in both Czech and English.
Read More Here
