gpg - difference --encrypt-to and --recipient

[MFPA]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi


On Monday 31 December 2018 at 9:06:39 PM, in
<mid:6A39FC9C-3105-451B-BB5E-6D6757337600 at colmena.biz>, justina
colmena via Gnupg-users wrote:-


> Shouldn't an email message (for example) be encrypted
> separately to
> each BCC recipient,

My opinion is that should be the case. However, most MUAs I've used
include the BCC recipients' keys in the encryption along with the To
and CC recipients' keys, so any email addresses in the user-IDs of
these keys are visible to all recipients.

As an exception, one MAU I used with an OpenPGP add-on would instead
send an individual copy of the message to each BCC recipient,
encrypted only to their key.



> or is this an intended all-in-one
> multiple-recipient encryption which cannot conceal
> from the
> cryptanalyst the fact that the same message,
> encrypted only once, is
> being sent to more than one receiving party?

With hidden-recipient or hidden-encrypt-to or throw-keyids, it is
clear how many keys were encrypted to, but the key IDs and user-IDs
are not present.

- --
Best regards

MFPA                  <mailto:2017-r3sgs86x8e-lists-groups at riseup.net>

Never trust a dog with orange eyebrows
-----BEGIN PGP SIGNATURE-----

iNUEARYKAH0WIQSWDIYo1ZL/jN6LsL/g4t7h1sju+gUCXCwQUV8UgAAAAAAuAChp
c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0OTYw
Qzg2MjhENTkyRkY4Q0RFOEJCMEJGRTBFMkRFRTFENkM4RUVGQQAKCRDg4t7h1sju
+l+qAP4u2Ik4+zBMKk5dQuE/6ZgvBFnBjeqKt79FEQufn92LiAEArbSWuqUsRdiK
zD88bQo1AwfqVzSLZ315pCVR+Rg/MASJApMEAQEKAH0WIQRSX6konxd5jbM7JygT
DfUWES/A/wUCXCwQUV8UgAAAAAAuAChpc3N1ZXItZnByQG5vdGF0aW9ucy5vcGVu
cGdwLmZpZnRoaG9yc2VtYW4ubmV0NTI1RkE5Mjg5RjE3Nzk4REIzM0IyNzI4MTMw
REY1MTYxMTJGQzBGRgAKCRATDfUWES/A/6f/D/0eScxxhozcB1TPwVDESl1ZdG4y
Ai6e8dmZyh9jVpEmTbiolXTw4IjWkuq26KMGyIdZEn2vSZtHwGm6AkMIWncR8D0A
P4rQWw+6Z9evsRLKkW3+J1TyQNQfA6YZ+gxTK6BLoyVqbp520CTNyfibq9PNN+mg
HqlxboA61ti2oMzQ0YhIq6H+RKbo7AhfpgQsN/NmVLa1tqbja1gQxbdmXV1axdmQ
EHn0VUKTaCYSiC9ulDAnoBVgg6h4zbxxawwa6NJQ03T5YBRzu3aLmlcpHaOj7DKZ
9LM3JTY+HlPWoAwLQhuLVKmDrt60GFobn3SDhgDlrwu1WVT+98jlCr3J+5BJlyOs
bAA8vCYpS6gEGtHa00JAd3qnnBfdGvxzs1wa88eHRqHkG6HWUj1qfxE5OCpGqcpy
Av4rfyANiRYAGnPb3+48kMCvLEGLyHTWyewrRc4tGbyxIIjjhH/N41Uz8FbjNCuT
/baoXoOzHoyzH+O78N8mn+IPyaN5sEwezUFeBZARYS6El9LU5+UsxGM4bW8wKwe+
f4GcKMGFFffQ0BEO5rIZPMwnP0X1HEVLnyOCmS+idUUCdBZ12OyEjApD1EH0B24Y
qTwxNAbT6538DhAYFzHi8EJHxUOsQBLMtYKuzTpqZnpBxK6rYDXqdhc17zXylu5U
a+4py/6A/kfU7UlBEA==
=tUMh
-----END PGP SIGNATURE-----