-
we got this error "Message is not authenticated." from our app while using this lib to decrypt the message. the message was signed and encrypted, can you tell what's the possible root cause for this error?
but I don't understand here, why do we only check the configuration here but not the message self? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
If that's where the error was thrown, it means the message does not include a protection mechanism to determine the authenticity of the decrypted data. This kind of messages will be deprecated in the next version of OpenPGP due to the EFAIL attack, so we prevent decrypting them, unless you give explicit permission by setting the config. |
Beta Was this translation helpful? Give feedback.
If that's where the error was thrown, it means the message does not include a protection mechanism to determine the authenticity of the decrypted data. This kind of messages will be deprecated in the next version of OpenPGP due to the EFAIL attack, so we prevent decrypting them, unless you give explicit permission by setting the config.