|
|
|
|
|
|
|
|
|
|
|
|
|
|
¨ |
A
reasonably careful claim:
|
|
|
|
“PGPfile encrypts, decrypts, signs and verifies files for
|
|
either
email or secure storage on your computer...” –
|
|
|
www.pgp.com, September 3, 2001
|
|
|
¨ |
Assumptions:
|
|
|
|
– |
Your
machine is not otherwise compromised
|
|
|
¨ |
Actions
to Compromise:
|
|
|
|
– |
Penetrate
the machine
|
|
|
|
– |
Run
standard password cracker against the private key
|
|
|
|
– |
Better
still – install a Trojan horse in front of the
|
|
|
password
capture dialog box…
|
|