Tampering with OpenPGP signed messages by exploiting multi-part messages

benthamsgaze.org