Missing 'END PGP MESSAGE' not detected

Werner Koch wk at gnupg.org
Wed Jan 19 21:01:12 CET 2011


On Wed, 19 Jan 2011 19:32, dshaw at jabberwocky.com said:

> If I remember correctly, GPG only complains for invalid CRC.  A missing CRC is legal, as the CRC is a MAY.

I checked the code and there is a missing CRC message.  I also recalled
the the CRC is may.  Looking again at it I noticed that I overlooked a
one condition (the one which indicates that a CRC follows).  Thus you
are right, the CRC is optional.  In any case the whole CRC and =====END
PGP... is not relevant from a cryptographic point of view.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.




More information about the Gnupg-users mailing list