Security researchers outwit, bypass popular email encryption

encryption
Credit: CC0 Public Domain

Germany's cybersecurity agency says German and Belgian researchers have found a way to outwit two widely used forms of email encryption.

IT security experts at the universities of Muenster, Bochum and Leuven were able to trick computers into covertly forwarding them the decrypted message.

Germany's Federal Office for Information Security said Monday that the method used exposes a "serious weakness" in the PGP and S/MIME standards.

But it added that, correctly used and configured, both forms of encryption remain secure. To prevent a breach, users need to secure access to their mailboxes and prevent their email clients from loading HTML code from external websites.

The vulnerability was first reported by German newspaper Sueddeutsche Zeitung and public broadcaster NDR.


Explore further

German researchers break W3C XML encryption standard

© 2018 The Associated Press. All rights reserved.

Citation: Security researchers outwit, bypass popular email encryption (2018, May 14) retrieved 23 October 2018 from https://techxplore.com/news/2018-05-outwit-bypass-popular-email-encryption.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.
4 shares

Feedback to editors

User comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more