Laboratory/Exchange

S/MIME

theking 2008. 5. 1. 02:46

S/MIME

From Wikipedia, the free encyclopedia

S/MIME(Secure / Multipurpose Internet Mail Extensions) is a standard forpublic keyencryptionandsigningofe-mailencapsulated inMIME.

Contents

[hide]

[edit]History

S/MIME was originally developed byRSA Data SecurityInc. The original specification used the recently developedIETFMIME specification with the de facto industry standardPKCS #7secure message format.

Change control to S/MIME has since been vested in the IETF and the specification is now layered onCryptographic Message Syntax, an IETF specification that is identical in most respects with PKCS #7.

[edit]Function

S/MIME provides the following cryptographic security services for electronic messaging applications: authentication, message integrity andnon-repudiationof origin (using digital signatures) and privacy and data security (using encryption). S/MIME specifies the application/pkcs7-mime (smime-type "enveloped-data") type for data enveloping (encrypting): the whole (prepared) MIME entity to be enveloped is encrypted and packed into an object which subsequently is inserted into an application/pkcs7-mime MIME entity.

S/MIME functionality is built into the vast majority of modern e-mail software and interoperates between them.

[edit]S/MIME Certificates

Before S/MIME can be used in any of the above applications, one must obtain and install an individual key/certificate either from one's in-housecertificate authority(CA) or from a public CA such as one of those listed below. Best practice is to use separate private keys (and associated certificates) for Signature and for Encryption, as this permits escrow of the encryption key without compromise to thenon-repudiationproperty of the signature key. Encryption requires having the destination party's certificate on store (which is typically automatic upon receiving a message from the party with a valid signing certificate). While it is technically possible to send a message encrypted (using the destination party certificate) without having one's own certificate to digitally sign, in practice, the S/MIME clients will require you install your own certificate before they allow encrypting to others.

A typical basic personal certificate verifies the owner's identityonlyin terms of binding them to an email address and does not verify the person's name or business. The latter, if needed (e.g. for signing contracts), can be obtained through CAs that offer further verification (digital notary) services or managed PKI service. For more detail on authentication, seeDigital Signature.

Depending on the policy of the CA, your certificate and all its contents may be posted publicly for reference and verification. This makes your name and email address available for all to see and possibly search for. Other CAs only post serial numbers and revocation status, which does not include any of the personal information. The latter, at a minimum, is mandatory to uphold the integrity of the public key infrastructure.

[edit]Obstacles to deploying S/MIME in practice

  • Not all e-mail software handles S/MIME, resulting in an attachment calledsmime.p7mthat often confuses people.
  • S/MIME is sometimes considered not properly suited for use via webmail clients. Though support can be hacked into a browser, some security practices require the private key to be kept accessible to the user but inaccessible from the webmail server, complicating the key webmail advantage of providing ubiquitous accessibility. This issue is not specific to S/MIME - any secure method of signing webmail requires a browser to execute code to produce the signature.
    • Some organizations consider it acceptable for webmail servers to be "in on the secrets"; others don't. Some of the considerations are mentioned below regardingmalware. Another argument is that servers often contain data that is confidential to the organization anyway, so what difference does it make if additional data, such a private keys used for decryption, are also stored and used on such servers?
    • Many make a distinction between private keys used for decryption and those used for digital signatures. They are far more likely to accept sharing of the former than the latter. This is especially true if the non-repudiation aspect of digital signatures is a concern (it may not be). There is fairly universal consensus that non-repudiation requires that a private key be undersolecontrol of its ownerduring its entire lifecycle. Therefore, it's more likely to accept decryption done with webmail servers than digital signatures.
  • S/MIME is tailored for end to end security. Encryption will not only encrypt your messages, but also malware. Thus if your mail is scanned for malware anywhere but at the end points, such as your company's gateway, encryption will defeat the detector and successfully deliver the malware. Solutions:
    • Perform malware scanning on end user stationsafterdecryption.
    • Store private keys on the gateway server so decryption can occur prior to the gateway malware scan. (Though this in some ways defeats the purpose of encryption, as it allows anyone with access to the gateway server to read another user's mail.)
    • Use message content scanners specifically designed to check the content of encrypted messages in transit whilst preserving end-to-end signatures and encryption. Such solutions must contain built-in protection for both the private key used to decrypt the message, and for the temporarily decrypted contents.

[edit]Caveats

When a message is encrypted using S/MIME (orPKCS#7), the public key of each intended recipient is extracted from their certificates and those certificates are identified in the message by issuer and serial number. One of the consequences of this is that if a certificate is renewed (i.e. new certificate, same keypair) and the old certificate is deleted thinking it won't be needed any more, S/MIME clients will no longer be able to locate the decryption key to decrypt messages sent before the renewal, even though the key hasn't changed. In other words, deletion of expired certificates can have surprising consequences.

Even more generally, any messages that an S/MIME client stores in their encrypted form will not be decryptable if the certificate used for encryption has been deleted or otherwise not available, whether that certificate has expired or not.

S/MIME signatures are usually done with what's called "detached signatures". The signature information is separate from the text being signed. The MIME type for this is multipart/signed with the second part having a MIME subtype of application/(x-)pkcs7-signature. Mailing list software is notorious for changing the textual part and thereby invalidating the signature.

[edit]Free access

Thawte(a subsidiary ofVerisign),CAcertand other companies offering free e-mail certificates for exclusive S/MIME usage on their Web site. Getting a certificate is as simple as visiting their Web site and signing up for an account. However, this does not automatically allow usage of one's name in the certificate. For that, one has to prove their identity in person to at least two Thawte notaries that are part of theirWeb of Trust.

[edit]See also

Cryptography Portal

[edit]External links

Retrieved from "http://en.wikipedia.org/wiki/S/MIME"

'Laboratory/Exchange'의 다른글

  • 현재글S/MIME

관련글

티스토리툴바