On the (In)Security of ElGamal in OpenPGP