So I know that PGP encrypted email can be vulnerable to a known-plaintext attack from a known, consistant email footer or greeting (“Hello”, “Yours truly, xxx”, etc), but does the same thing apply to PGP signatures on an email?

If I always PGP sign my emails, and all my emails end with “From, [name]”, can any of my secret PGP information be exposed?

  • 1
    For a signature, the plain text is known by design. If having the plaintext m and the signature of m with the private key p would allow one to deduce p, then that signature scheme would be completely broken by design. – MechMK1 Oct 11 '19 at 6:56

Short answer: no.

Longer answer: If your PGP encryption is vulnerable to known-plaintext attacks, then that means PGP is using an old broken cipher. Modern, non-broken crypto (with updated software) will not have vulnerabilities like this. You can encrypt or sign whatever you want and no secret key information will be revealed.

| improve this answer | |
  • Thank you for the quick answer – ggliv Oct 10 '19 at 20:00

Not the answer you're looking for? Browse other questions tagged or ask your own question.