Re: SMIME ECC encryption
Russ Housley <[email protected]>
| Newsgroups | gmane.ietf.x509 |
|---|---|
| Message-ID | <[email protected]> |
> On Sep 22, 2020, at 6:34 AM, Peter Gutmann <[email protected]> wrote: > > Russ Housley <[email protected]> writes: > >> The current implementation of OpenSSL does not do S/MIME 4.0, which uses >> AuthEnvelopedData. The current version of OpenSSL supports earlier versions >> of S/MIME, which use EnvelopedData. > > That may be a different thing though, the OP was asking for "ECC encryption" > which I assume is static-ephemeral ECDH or ECMQV (pick one at random) rather > than use of AuthEnvelopedData. There are implementations of CMS > AuthEnvelopedData, but AFAIK the number of implementations of ECDH-as-key- > transport are the same as the number of implementations of DH-as-key- > transport. AuthEnvelopedData and EnvelopedData support the same mechanisms for establishing a key. AuthEnvelopedData uses that key with an AEAD. EnvelopedData did not have a place to carry the authentication tag. Russ