Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

We do compression in PGP.
Does this step increase/decrease or either have any effect regarding the authentication of a message?

share|improve this question
1  
Probably a duplicate of crypto.stackexchange.com/questions/2182/… –  archie Apr 5 at 1:09
    
@archie This question specifically asks about authentication. The question you linked to is more general. The answers there don't really address authentication. I'm guessing the OP is thinking that creating two messages with the same compressed version is easier than a traditional (hash function) collision attack. The idea being that perhaps if you had two messages with the same compressed version, then the signature would be the same. Perhaps the OP can comment. –  mikeazo Apr 7 at 16:55
    
May I know why I get down-voted! –  Sharmin Apr 7 at 17:28
    
And above links are not related if you look carefully my question! –  Sharmin Apr 7 at 17:30
    
But thanks for the above links; they are helpful. –  Sharmin Apr 7 at 17:34

1 Answer 1

up vote 3 down vote accepted

From RFC 4880 - Open PGP Message Format (emphasis added)

OpenPGP implementations SHOULD compress the message after applying the signature but before encryption.

As the signature provides authentication, and you specifically ask about authentication, I think that quote from the RFC should answer your question. Compression does not affect authentication of the message at all as the authentication step (signing) is applied before compression. See the question archie linked for other issues with compression.

share|improve this answer
    
thanks mikeazo, you got the point; I asked only for authentication. Not about encryption. –  Sharmin Apr 7 at 17:27

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.