Usage of AEAD in S/MIME in Thunderbird

Falko Strenzke <[email protected]> Mon, 14 Aug 2023 14:23:39 +0200
Newsgroups gmane.comp.mozilla.crypto
Message-ID <[email protected]>
I would like to report that we realized that even when sending an 
encrypted encrypted E-Mail between two Thunderbird instances, AEAD is 
not used in the S/MIME encryption, even though it seems to be supported 
by NSS. Instead the legacy CBC mode encryption, known to subject to all 
kind of manipulation attacks, is used.

- Falko

-- 

*MTG AG*
Dr. Falko Strenzke
Executive System Architect

Phone: +49 6151 8000 24
E-Mail: [email protected]
Web: mtg.de <https://www.mtg.de>


*MTG Exhibitions – See you in 2023*

------------------------------------------------------------------------
<https://community.e-world-essen.com/institutions/allExhibitors?query=true&keywords=mtg> 
<https://www.itsa365.de/de-de/companies/m/mtg-ag>

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If 
you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email. Unauthorised 
copying or distribution of this email is not permitted.

Data protection information: Privacy policy 
<https://www.mtg.de/en/privacy-policy>

-- 
You received this message because you are subscribed to the Google Groups "[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/30eef629-1d31-4dea-a87c-3f23f859b0e1%40gmail.com.