[schof]

So. I submit a vuln that says "Product X has vulnerability Y."

The vendor decrypts this, and marks it as fixed in your database by submitting "decrypted" text that says "I like ponies."

[fczuardi]

The encrypted “I like ponies” would not match the encrypted “Product X has vulnerability Y”