Questions tagged [s-mime]
Secure/Multipurpose Internet Mail Extensions, or short S-MIME, is a standard for public key encryption and signing of MIME data.
11 questions
0
votes
0
answers
62
views
Self-signed certificate for S/MIME signature
I'm trying to programatically send an email with an S/MIME signature using a self-signed certificate, but Thunderbird keeps showing an error on the signature.
Digital signature is not valid
This ...
- 101
1
vote
1
answer
226
views
Does CMS AuthEnvelopedData type provide message authentication?
I was looking through the S/MIME Message specification (RFC 8551) to find out what security services it offers. Section 2.4.4 of this document describing AuthEnvelopedData content type (which uses the ...
1
vote
0
answers
803
views
PKCS#7 digest encryption algorithm - difference between rsaEncryption and sha256WithRsaEncryption
As part of our linux secure boot implementation using dm-verity and root hash signature checking, I need to sign a file with the following openssl command (example):
...
0
votes
1
answer
52
views
Can I use a government-issued certificate in Outlook? [closed]
My government issues certificates for many purposed, including e-mail signing.
The government doesn't provide e-mail addresses, but it does declare my e-mail in the certificate.
Can I use this ...
- 97
3
votes
1
answer
1k
views
Which algorithm to use for S/MIME
I'm wondering if the algorithm 1.2.840.113549.1.1.1 (rsaEncryption) is still secure to use for S/MIME encryption. I'm afraid that the scheme is vulnerable against ...
- 33
59
votes
2
answers
12k
views
Is the software that uses PGP broken, or is it PGP itself?
PGP is all over the news (even on TV) and there seems to be a lot of confusion about it.
For the time being, people face articles like Attention PGP users: new vulnerabilities require you to take ...
- 18.1k
2
votes
1
answer
1k
views
Why does 3DES need private key to decrypt?
I create two files, my.cer and my.pem ( include certificate and private key), I encrypt a file with my.cer, I use openssl smime -encrypt command. When decrypting data, it needs my.pem.
I think 3DES ...
- 25
1
vote
1
answer
2k
views
extract ciphertext from encrypted SMIME file
the main question of this message is how to get the true ciphertext from S/MIME file?
I created RSA keys and encrypted a message with S/MIME as follow :
...
- 61
6
votes
3
answers
2k
views
Is there benefit to signing unencrypted emails?
I came to this article from another comment on Crypto StackExchange. After reading it, I am wondering if there is any benefit to using a digital signature on unencrypted S/MIME emails?
- 171
2
votes
2
answers
343
views
Security of S/MIME in case of CA compromise
Suppose Alice and Bob are exchanging messages using S/MIME, protected by certificates that have been issued by either the same CA or by two mutually independent CAs. There exists an adversary Mallory ...
- 10.5k
5
votes
2
answers
301
views
Can S/MIME be still considered secure?
Previoulsy I had asked this question at https://stackoverflow.com/questions/18235983/can-s-mime-be-still-considered-secure but I feel this forum is topic-wise the right place.
Recently there has been ...
- 153