Efail - Breaking S-MIME and OpenPGP Email Encryption Using Exfiltration Channels

Efail - Breaking S-MIME and OpenPGP Email Encryption Using Exfiltration Channels

Explore the vulnerabilities in OpenPGP and S/MIME email encryption standards in this 46-minute Black Hat conference talk. Delve into the history of secure email, the motivation for end-to-end encryption, and the use of outdated cryptographic primitives. Examine backchannel techniques and their evaluation in email clients. Understand the attacker model, hybrid encryption, and the malleability of CBC/CFB. Analyze practical attacks against S/MIME and OpenPGP's integrity protection mechanisms. Investigate the impact on standards and witness a direct exfiltration demo. Gain insights into the security implications of these vulnerabilities and their potential consequences for email encryption.