Damian Poddebniak

Re: What's Up Johnny? -- Covert Content Attacks on Email End-to-End Encryption

2019 · arXiv (Cornell University)

We show practical attacks against OpenPGP and S/MIME encryption and digital signatures in the context of email. Instead of targeting the underlying cryptographic primitives, our attacks abuse legitimate features of the MIME standard and HTML, …