Don&#x27;t get me wrong, I love to take a dump on GPG as much as the next guy, but this argument is a little misguided. If you&#x27;re decrypting password files that come from a malicious party, you have a pretty big hole in your security model.