Usage of AEAD in S/MIME in Thunderbird
Falko Strenzke <[email protected]> Mon, 14 Aug 2023 14:23:39 +0200
| Newsgroups | gmane.comp.mozilla.crypto |
|---|---|
| Message-ID | <[email protected]> |
I would like to report that we realized that even when sending an encrypted encrypted E-Mail between two Thunderbird instances, AEAD is not used in the S/MIME encryption, even though it seems to be supported by NSS. Instead the legacy CBC mode encryption, known to subject to all kind of manipulation attacks, is used. - Falko -- *MTG AG* Dr. Falko Strenzke Executive System Architect Phone: +49 6151 8000 24 E-Mail: [email protected] Web: mtg.de <https://www.mtg.de> *MTG Exhibitions – See you in 2023* ------------------------------------------------------------------------ <https://community.e-world-essen.com/institutions/allExhibitors?query=true&keywords=mtg> <https://www.itsa365.de/de-de/companies/m/mtg-ag> MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany Commercial register: HRB 8901 Register Court: Amtsgericht Darmstadt Management Board: Jürgen Ruf (CEO), Tamer Kemeröz Chairman of the Supervisory Board: Dr. Thomas Milde This email may contain confidential and/or privileged information. If you are not the correct recipient or have received this email in error, please inform the sender immediately and delete this email. Unauthorised copying or distribution of this email is not permitted. Data protection information: Privacy policy <https://www.mtg.de/en/privacy-policy> -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/30eef629-1d31-4dea-a87c-3f23f859b0e1%40gmail.com.