A fatal flaw in PGP 6.0