From 94d9efa1e7c123445b24754fec13631672f6d4fa Mon Sep 17 00:00:00 2001 From: Paul Schaub Date: Mon, 2 Jan 2023 13:12:14 +0100 Subject: [PATCH] OpenPgpMessageInputStream: Ignore non-integrity-protected data if configured --- .../decryption_verification/OpenPgpMessageInputStream.java | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/pgpainless-core/src/main/java/org/pgpainless/decryption_verification/OpenPgpMessageInputStream.java b/pgpainless-core/src/main/java/org/pgpainless/decryption_verification/OpenPgpMessageInputStream.java index c26c949b..bb5d67b3 100644 --- a/pgpainless-core/src/main/java/org/pgpainless/decryption_verification/OpenPgpMessageInputStream.java +++ b/pgpainless-core/src/main/java/org/pgpainless/decryption_verification/OpenPgpMessageInputStream.java @@ -409,8 +409,10 @@ public class OpenPgpMessageInputStream extends DecryptionStream { PGPEncryptedDataList encDataList = packetInputStream.readEncryptedDataList(); if (!encDataList.isIntegrityProtected()) { - LOGGER.debug("Symmetrically Encrypted Data Packet is not integrity-protected and is therefore rejected."); - throw new MessageNotIntegrityProtectedException(); + LOGGER.warn("Symmetrically Encrypted Data Packet is not integrity-protected."); + if (!options.isIgnoreMDCErrors()) { + throw new MessageNotIntegrityProtectedException(); + } } SortedESKs esks = new SortedESKs(encDataList);