News for hackers. Stuff that matters.

A comment on Modern Alternatives to PGP. Parent comment

Re:Modern Alternatives to PGP by justincormack on Friday February 15, 2019 @04:30PM (#19174909)
It is not recommended to use any keys for more than one purpose any more, this can allow attacks. So this is by design.
[ Parent | on HN ]
Re:Modern Alternatives to PGP by g45y45 on Friday February 15, 2019 @04:48PM (#19175027)
Right, but how does one bind the keys if they do not mutually support encryption or signing
[ Parent | on HN ]
Re:Modern Alternatives to PGP by AgentME on Friday February 15, 2019 @05:18PM (#19175248)
PGP never uses the same key for both either. A PGP "key" is a signing key and a decryption key bundled together and then signed by the signing key.
[ Parent | on HN ]
Re:Modern Alternatives to PGP by throwaway415415 on Friday February 15, 2019 @09:43PM (#19176688)
It's not by design. There are stuff like decaf, ristretto and qDSA which "fix" this
[ Parent | on HN ]