Tampering with OpenPGP signed messages by exploiting multi-part messages
benthamsgaze.org