News for hackers. Stuff that matters.
Re:Encrypt messages using SSH public keys from GitHub. by A1kmm on Thursday April 04, 2013 @08:18PM (#5496117)
Wouldn't it be better to feed the RSA public key into an existing message encryption system like gpg? There are a few things you could improve that way:

* No message integrity - it would be good to be able to sign and encrypt.

* Encrypting the same plaintext twice gives the same ciphertext (there is no randomness). This means that an attacker can confirm if a given ciphertext corresponds to a suspected plaintext.

* RSA is comparatively slow; it is usually better to encrypt a symmetric key with RSA and then encrypt the message with the symmetric key.

Re:Encrypt messages using SSH public keys from GitHub. by twe4ked on Thursday April 04, 2013 @08:41PM (#5496190)
Sure. This is intended as a quick way to send small bits of sensitive information over email, chat, etc.