USB key form-factor smart-card readers with pinpads?

MFPA 2014-667rhzu3dc-lists-groups at riseup.net
Sun Jan 12 04:42:27 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi


On Saturday 11 January 2014 at 11:18:55 PM, in
<mid:CAD-JurKqFowP=2HCKGjM8kwVG3Tus9b54ufGA1_VwX7VvEV80w at mail.gmail.com>,
Sam Kuper wrote:



> Yes, as I said, it could tamper with the message. But
> if it does that, then when a recipient attempts to
> verify the signature, gpg --verify will give the
> message, "gpg: BAD signature".

Not if the malware tampered with the message *before* the signature
was applied.


- --
Best regards

MFPA                    mailto:2014-667rhzu3dc-lists-groups at riseup.net

Those who do not read are no better off than those who cannot.
-----BEGIN PGP SIGNATURE-----

iPQEAQEKAF4FAlLSDylXFIAAAAAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5p+aUD/AmHNQ0q2ND2SQPzwnLr5iJTRdn/DLDzfl81
kMXA3snvbbWdLKWF4Cgp9yCdHmklcdA2hp5Bm639eMtywIAOHSCufXt5hbi1ueCu
zHBbx0INVQmoszpiAIp1ljh5Pb8KklTaAMDNbWLF53sN00k8pA1PgLsupFzePf1a
qYokFedS
=T3Y2
-----END PGP SIGNATURE-----




More information about the Gnupg-users mailing list