We do compression in PGP.
Does this step increase/decrease or either have any effect regarding the authentication of a message?

  • 1
    $\begingroup$ Probably a duplicate of crypto.stackexchange.com/questions/2182/… $\endgroup$
    – archie
    Apr 5 '14 at 1:09
  • $\begingroup$ @archie This question specifically asks about authentication. The question you linked to is more general. The answers there don't really address authentication. I'm guessing the OP is thinking that creating two messages with the same compressed version is easier than a traditional (hash function) collision attack. The idea being that perhaps if you had two messages with the same compressed version, then the signature would be the same. Perhaps the OP can comment. $\endgroup$
    – mikeazo
    Apr 7 '14 at 16:55
  • $\begingroup$ May I know why I get down-voted! $\endgroup$
    – Sharmin
    Apr 7 '14 at 17:28
  • $\begingroup$ And above links are not related if you look carefully my question! $\endgroup$
    – Sharmin
    Apr 7 '14 at 17:30
  • $\begingroup$ But thanks for the above links; they are helpful. $\endgroup$
    – Sharmin
    Apr 7 '14 at 17:34

From RFC 4880 - Open PGP Message Format (emphasis added)

OpenPGP implementations SHOULD compress the message after applying the signature but before encryption.

As the signature provides authentication, and you specifically ask about authentication, I think that quote from the RFC should answer your question. Compression does not affect authentication of the message at all as the authentication step (signing) is applied before compression. See the question archie linked for other issues with compression.

  • $\begingroup$ thanks mikeazo, you got the point; I asked only for authentication. Not about encryption. $\endgroup$
    – Sharmin
    Apr 7 '14 at 17:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.