We do compression in PGP.
Does this step increase/decrease or either have any effect regarding the authentication of a message?

  • 1
    $\begingroup$ Probably a duplicate of crypto.stackexchange.com/questions/2182/… $\endgroup$ – archie Apr 5 '14 at 1:09
  • $\begingroup$ @archie This question specifically asks about authentication. The question you linked to is more general. The answers there don't really address authentication. I'm guessing the OP is thinking that creating two messages with the same compressed version is easier than a traditional (hash function) collision attack. The idea being that perhaps if you had two messages with the same compressed version, then the signature would be the same. Perhaps the OP can comment. $\endgroup$ – mikeazo Apr 7 '14 at 16:55
  • $\begingroup$ May I know why I get down-voted! $\endgroup$ – Sharmin Apr 7 '14 at 17:28
  • $\begingroup$ And above links are not related if you look carefully my question! $\endgroup$ – Sharmin Apr 7 '14 at 17:30
  • $\begingroup$ But thanks for the above links; they are helpful. $\endgroup$ – Sharmin Apr 7 '14 at 17:34

From RFC 4880 - Open PGP Message Format (emphasis added)

OpenPGP implementations SHOULD compress the message after applying the signature but before encryption.

As the signature provides authentication, and you specifically ask about authentication, I think that quote from the RFC should answer your question. Compression does not affect authentication of the message at all as the authentication step (signing) is applied before compression. See the question archie linked for other issues with compression.

  • $\begingroup$ thanks mikeazo, you got the point; I asked only for authentication. Not about encryption. $\endgroup$ – Sharmin Apr 7 '14 at 17:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.