SigSpoof
SigSpoof is a family of vulnerabilities that affected the software package GNU Privacy Guard ("GnuPG"). Some other software packages that make use of GnuPG were also affected, such as Pass.[1]
In unpatched versions of affected software, SigSpoof attacks allow cryptographic signatures to be convincingly spoofed, under certain circumstances. This potentially enables a wide range of subsidiary attacks to succeed.[2][3][1][4][5]
References
- ^ a b "Pass gets a fail: Simple Password Store suffers GnuPG spoofing bug".
- ^ Security, heise. "Enigmail und GPG Suite: Neue Mail-Plugin-Versionen schließen GnuPG-Lücke". Security.
- ^ "SigSpoof: Signaturen fälschen mit GnuPG - Golem.de".
- ^ "Decades-old PGP bug allowed hackers to spoof just about anyone's signature".
- ^ "20 Jahre alter Fehler entdeckt: PGP-Signaturen ließen sich einfach fälschen - derStandard.at". DER STANDARD.
 | This computing article is a stub. You can help Wikipedia by expanding it. |