519432 - GOST cryptoalgorithms support in S/MIME.

Status: NEW

(MailNews Core :: Security: S/MIME, enhancement)

Description

[Konstantin Andreev]

User-Agent:       Mozilla/5.0 (X11; U; SunOS i86pc; ru; rv:1.9.1b2) Gecko/20090209 Firefox/3.1b2
Build Identifier: 

"GOST" is an acronym which means "Russian Federation National Standard". Among other, GOSTs specify a set of cryptoalgorithms, which mandated for use in government organizations and "working for government" organizations.

At the moment, only a few commercial, closed-source, MSWindows-only solutions available for securing email using GOST cryptoalgorithms. 

There is a big demand in support of the GOST algorithms by the open-source, verifiable, de-facto standard e-mail application. I am talking about Thunderbird.

*Let support GOST cryptoalgorithms in the Thunderbird S/MIME*

This is a preliminary request, because I still have no idea how much of the Thunderbird code should be really changed to support GOST. Maybe none at all.

Related work for supporting GOST algorithms in the NSS has been initiated ( see bug 518787 ). And I plan to supply corresponding patches to Thunderbird, if they will be needed.

IMHO, GOST crypto support in Thunderbird does not require UI change.

Please, provide a feedback for this request.

Reproducible: Always




Normative References:

RFC4357 Additional Cryptographic Algorithms for Use with GOST.
RFC4490 Using the GOST with Cryptographic Message Syntax (CMS).
RFC4491 Using the GOST with X.509 PKI
PKCS#11 V2.30

Comment 1

[Ludovic Hirlimann [:Usul]]

confirming rfe

Comment 2

[Taavi]

I don't think this is desirable or feasible on top of NSS and should be closed.