chatmail / chatmail/core

Delta Chat encrypts to subkey that is not marked with encryption flag

Open
#6,520 3 comments 0 reactions 1 assignee Claimed by @link2xt View on GitHub
bug
Dominant language
Rust
Stars
929
Forks
143
Avg merge
1d 20h
Merged PRs (30d)
53

Description

There is a user that has a key consisting of RSA primary key that is marked for encryption, signing and certification. And there is an authentication RSA subkey. They imported the key into Delta Chat and now receive messages that they cannot decrypt in Thunderbird, because the other side using Delta Chat is encrypting to the subkey (which should not be used for encryption) and Thunderbird tries to decrypt only with the primary key.

It's not recommended to use the same RSA key for encryption and signing at the same time, and Autocrypt specification says there should be a signing-capable primary key and encryption subkey, so this normally does not happen for Delta Chat users.

Here is a key selection function that even has a TODO:
https://github.com/deltachat/deltachat-core-rust/blob/0040c17892b0d2c1002800248bf49b455d538a02/src/pgp.rs#L246-L268

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.