News for hackers. Stuff that matters.

A comment on EFail – Vulnerabilities in end-to-end encryption technologies OpenPGP and S/MIME. Parent comment

Re:EFail – Vulnerabilities in end-to-end encryption technolo... by rocqua on Monday May 14, 2018 @01:23PM (#17067364)
If the message is too large to buffer, one might also first just decrypt and stream the plaintext into sha-1.

Once the MDC clears, you can just decrypt again, this time writing to stdout.

[ Parent | on HN ]
Re:EFail – Vulnerabilities in end-to-end encryption technolo... by tedunangst on Monday May 14, 2018 @02:33PM (#17068145)
This is difficult if the input is a nonseekable stream, but that doesn't excuse producing bad output.
[ Parent | on HN ]
Re:EFail – Vulnerabilities in end-to-end encryption technolo... by tptacek on Monday May 14, 2018 @02:35PM (#17068167)
That's why I didn't suggest it, but to be fair, you could tee the stream into an intermediate file for a two-pass scheme.
[ Parent | on HN ]