1911870 - Support for SHA-3 and SHAKE in S/MIME

Status: UNCONFIRMED

(MailNews Core :: Security: S/MIME, enhancement)

Description

[leszek.zablocki]

Attachment: make_SHA3_signed_emails.tar.gz

Steps to reproduce:

Steps to Reproduce:

• import certs: public_user/*.cer
• change trusts,
• open emails: signedData/*.eml

Actual results:

Th. can't verify SHA-3 signed emails.

Expected Results:

Th. can create and verify SHA-3 and SHAKE128/SHAKE256 signed emails.

RFC:

• SHAKE in CMS rfc8702
• Algo ID for RSASSA-PSS and ECDSA Using SHAKEs rfc8692
• SHA3 in CMS (draft)

digestAlgorithm:
----------------

  sha3-224 (2.16.840.1.101.3.4.2.7)
  sha3-256 (2.16.840.1.101.3.4.2.8)
  sha3-384 (2.16.840.1.101.3.4.2.9)
  sha3-512 (2.16.840.1.101.3.4.2.10)

  id-shake128 (2.16.840.1.101.3.4.2.11)
  id-shake256 (2.16.840.1.101.3.4.2.12)

signatureAlgorithm:
-------------------

  rsaEncryption (1.2.840.113549.1.1.1)
    [vanilla RSA signatures PKCS#1 version 1.5]
    or
  id-rsassa-pkcs1-v1-5-with-sha3-224 (2.16.840.1.101.3.4.3.13)
  id-rsassa-pkcs1-v1-5-with-sha3-256 (2.16.840.1.101.3.4.3.14)
  id-rsassa-pkcs1-v1-5-with-sha3-384 (2.16.840.1.101.3.4.3.15)
  id-rsassa-pkcs1-v1-5-with-sha3-512 (2.16.840.1.101.3.4.3.16)

  ecdsa_with_SHA3-224 (2.16.840.1.101.3.4.3.9)
  ecdsa_with_SHA3-256 (2.16.840.1.101.3.4.3.10)
  ecdsa_with_SHA3-384 (2.16.840.1.101.3.4.3.11)
  ecdsa_with_SHA3-512 (2.16.840.1.101.3.4.3.12)
    [ECDSA with SHA3]

  id-RSASSA-PSS-SHAKE128 (1.3.6.1.5.5.7.6.30)
  id-RSASSA-PSS-SHAKE256 (1.3.6.1.5.5.7.6.31)
    [RSA Probabilistic signature]

  id-ecdsa-with-shake128 (1.3.6.1.5.5.7.6.32)
  id-ecdsa-with-shake256 (1.3.6.1.5.5.7.6.33)
    [ECDSA]

similar NSS:

bug#1342546, bug#1753026, bug#158750, bug#1597201

MailNews Core S/MIME:

bug#1597202, bug#222179

other:

bug#1756413

User-Agent:
Thunderbird 128.0.1esr (64-bit), Windows 10

--

I placed the certificate signed with the SHA3 algorithm in the SHA3_signed_cert/sha3_smime_RSA_ee_cert.crt directory, see: bug#1342546#c9

Comment 1

[leszek.zablocki]

Attachment: sha3_joseph_swanson.png