You're open to a different attack: If someone has access to (part of) your CPU state before and after you make the PGP file, they may be able to decrypt the message if they manage to intercept it.