PGPainless/pgpainless
PGPainless/pgpainless
1
0
Fork 0
mirror of https://github.com/pgpainless/pgpainless.git synced 2024-11-16 09:22:05 +01:00
Code Issues Releases Wiki Activity

OpenPgpMessageInputStream: Ignore non-integrity-protected data if configured

Browse source
This commit is contained in:
Paul Schaub 2023-01-02 13:12:14 +01:00
parent 7be12b0aaa
commit 94d9efa1e7
Signed by: vanitasvitae
GPG key ID: 62BEE9264BF17311
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
pgpainless-core/src/main/java/org/pgpainless/decryption_verification/OpenPgpMessageInputStream.java
View file

@ -409,8 +409,10 @@ public class OpenPgpMessageInputStream extends DecryptionStream {
PGPEncryptedDataList encDataList = packetInputStream.readEncryptedDataList(); PGPEncryptedDataList encDataList = packetInputStream.readEncryptedDataList();
if (!encDataList.isIntegrityProtected()) { if (!encDataList.isIntegrityProtected()) {
LOGGER.debug("Symmetrically Encrypted Data Packet is not integrity-protected and is therefore rejected."); LOGGER.warn("Symmetrically Encrypted Data Packet is not integrity-protected.");
throw new MessageNotIntegrityProtectedException(); if (!options.isIgnoreMDCErrors()) {
throw new MessageNotIntegrityProtectedException();
}
} }
SortedESKs esks = new SortedESKs(encDataList); SortedESKs esks = new SortedESKs(encDataList);