News for hackers. Stuff that matters.
Re:Proton Mail Discloses User Data Leading to Arrest in Spain by twiss on Tuesday May 07, 2024 @10:43AM (#40286103)
FWIW, OpenPGP doesn't only offer ElGamal, and we never use that algorithm. We use Curve25519 by default since quite a while, before which we used RSA. We've never used ElGamal and also don't allow importing ElGamal keys, since they're insecure and deprecated in the crypto refresh (the upcoming update to the OpenPGP standard): https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-cry....
Re:Proton Mail Discloses User Data Leading to Arrest in Spain by Y_Y on Wednesday May 08, 2024 @06:10AM (#40296236)
Good point, I just picked the simplest example. In fact I use Proton for my personal email and wouldn't dream of it if I didn't think your crypto was up to scratch.