News for hackers. Stuff that matters.

A comment on Automatically encrypt your Gmail account. Parent comment

Re:Automatically encrypt your Gmail account by etherael on Tuesday June 25, 2013 @01:14PM (#5940940)
That I guess would depend on the algo for the PGP key in question. The default these days is RSA 2048 for gpg, which as far as I know is not vulnerable to known plaintext attacks.
[ Parent | on HN ]
Re:Automatically encrypt your Gmail account by sp332 on Tuesday June 25, 2013 @01:58PM (#5941252)
The trouble is, if you use the same key to encrypt the same plaintext, you'll get the same ciphertext. Then an eavesdropper can compare the ciphertext you sent her with the ciphertext you sent someone else and see if they are the same.
[ Parent | on HN ]
Re:Automatically encrypt your Gmail account by croikle on Tuesday June 25, 2013 @02:51PM (#5941584)
This is why all worthwhile encryption schemes are nondeterministic, incorporating randomness. If you encrypt the same data twice with GPG, the results will not be the same.
[ Parent | on HN ]