clarify MDC

This commit is contained in:
Tammi L. Coles 2023-10-13 16:15:05 +02:00 committed by Heiko Schaefer
parent 6734930bd9
commit b9341d921e
No known key found for this signature in database
GPG key ID: 4A849A1904CCBD7D

View file

@ -63,7 +63,7 @@ Where symmetric keys are used in OpenPGP for data encryption, they are called ei
In OpenPGP version 6, AEAD replaced the MDC[^MDC] mechanism to address malleability. In earlier OpenPGP versions, malicious alterations to ciphertext might go unnoticed. AEAD guards against such undetected changes. In OpenPGP version 6, AEAD replaced the MDC[^MDC] mechanism to address malleability. In earlier OpenPGP versions, malicious alterations to ciphertext might go unnoticed. AEAD guards against such undetected changes.
[^MDC]: In OpenPGP version 4, a mechanism called MDC (Modification Detection Code) was introduced to serve a comparable purpose as AEAD. While MDC is a non-standard mechanism, as of this writing, there are no known attacks against the scheme. [^MDC]: OpenPGP version 4 introduced a mechanism called MDC (Modification Detection Code), which fulfills a comparable purpose as AEAD in safeguarding message integrity. MDC is a non-standard mechanism, but no known attacks have compromised this scheme as of this document's last update.
By addressing the malleability problem, AEAD also counters a variation of the EFAIL[^efail] attack. By addressing the malleability problem, AEAD also counters a variation of the EFAIL[^efail] attack.