10000 handle PKCS#7 authEnveloped-data · Issue #65 · jstedfast/gmime · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

handle PKCS#7 authEnveloped-data #65

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dkg opened this issue Dec 2, 2019 · 1 comment
Open

handle PKCS#7 authEnveloped-data #65

dkg opened this issue Dec 2, 2019 · 1 comment

Comments

@dkg
Copy link
Contributor
dkg commented Dec 2, 2019 •
edited
Loading

AuthEnvelopedData is basically AEAD applied to CMS in place of traditional encryption. It provides robust message integrity in addition to encryption.

See §3.4 of RFC 8551

It should probably behave in GMime in exactly the same way as EnvelopedData, but it's a different smime-type tag.
@jstedfast jstedfast mentioned this issue Dec 17, 2019
Open
18 tasks
@jstedfast
Copy link
Owner
jstedfast commented Apr 4, 2025 •
edited
Loading

I'm discovering that this kinda-sorta at least depends on which encryption algorithm gets used. Algorithms like AES CBC are meant for enveloped-data but AES GCM and AES CCM are meant to be used as authenveloped-data as far as I can tell.

One question that would need to be determined is how to tell which smime-type to use based on what GnuPG/SM used as the encryption algorithm. I wonder if it provides such a hint? Better yet would be if GnuPG/SM told us directly which smime-type to use.

The next question I have right now (I haven't read the specs yet, I've only dabbled into this a tiny bit) is: do we need to do anything different when decrypting the content of an authenveloped-data part? I.e. what does it mean for the enveloped data to be "authenticated"? Does it mean there's a way to get digital signatures out of it? Or is this more like a CRC?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@dkg @jstedfast
0