Re:EFail – Vulnerabilities in end-to-end encryption technolo...
by John_KZ on Tuesday May 15, 2018 @10:35PM
(#17079594)
>talks about creating a new signature with the attacker's identity
Wait, if the signature isn't created with the same key as the message encryption, how does this even work? Shouldn't the client fail to either decrypt the message or validate the signature?
Wait, if the signature isn't created with the same key as the message encryption, how does this even work? Shouldn't the client fail to either decrypt the message or validate the signature?