Does ciphermail support RSASSA-PSS?

Andre_Burger · May 9, 2017, 4:50pm

Does ciphermail support the signature scheme RSASSA-PSS (PKCS #1 v2.1)?
And if so, how is it configured?

Since ciphermail version 2.5.0-04 there is support for S/MIME v3.2 as
described in rfc5751. This RFC denotes RSASSA-PSS as "SHOULD+". I didn't
find any reference to it in ciphermail documentation.

Kind regards,
Andre

martijn · May 9, 2017, 4:56pm

At the moment this is not supported. At least not for sending. However
for the last couple of days we have been working on supporting
RSASSA-PSS and RSAES-OAEP since this is required by "EDI(a)Energy" (a
German standard). If you are interested I might be able to provide you
with a pre release version with support for RSASSA-PSS and RSAES-OAEP in
a couple of days.

Kind regards,

Martijn Brinkers

···

On 05/09/2017 06:50 PM, Andre Bürger via Users wrote:

Does ciphermail support the signature scheme RSASSA-PSS (PKCS #1 v2.1)?
And if so, how is it configured?

Since ciphermail version 2.5.0-04 there is support for S/MIME v3.2 as
described in rfc5751. This RFC denotes RSASSA-PSS as "SHOULD+". I didn't
find any reference to it in ciphermail documentation.

--
CipherMail email encryption

Email encryption with support for S/MIME, OpenPGP, PDF encryption and
secure webmail pull.

Twitter: http://twitter.com/CipherMail

martijn · May 9, 2017, 5:06pm

I forgot to add that even though S/MIME v3.2 says it should be
supported, to my knowledge no email client currently supports
RSASSA-PSS. Only really recent versions of OpenSSL support RSASSA-PSS
but Outlook, Thunderbird etc. do not support RSASSA-PSS nor RSAES-OAEP.
The upcoming CipherMail gateway does so will be able to use gateway to
gateway encryption/signing using RSASSA-PSS and RSAES-OAEP.