S/MIME 4.0 (RFC 8551): PKCS7_ support?

Hubert Kario hkario at redhat.com
Tue Oct 10 16:28:57 UTC 2023


On Monday, 9 October 2023 21:37:22 CEST, Viktor Dukhovni wrote:
> On Mon, Oct 09, 2023 at 09:10:04PM +0200, Steffen Nurpmeso wrote:
>
>>  |Join the queue, :-(
>>  |
>>  |    https://github.com/openssl/openssl/issues/11915
>> 
>> I did search only via Google as github is practically unusable if
>> your bandwidth is out and you live with 5-8 Kbyte/sec.
>> .... :) well ok hm, that gets a bit too involved for me, but the
>> cms tool uses the PKCS7_*() itself, so we are brothers in failure.
>
> CMS extends and subsumes S/MIME.  If support for ED25519 is to happen,
> it has to happen in CMS, and the smime(1) command-line should come along
> for the ride, because presumably under the covers support for Ed25519
> and Ed448 would happen in PKCS7 as well as CMS.
>
> Or, you could just use cms(1) instead, if smime(1) is left behind.

smime(1) doesn't even support RSA-OAEP, it should be just marked as
abandoned in documentation

-- 
Regards,
Hubert Kario
Principal Quality Engineer, RHEL Crypto team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic



More information about the openssl-users mailing list