Skip to content

Commit 2fd6b61

Browse files
committed
mail_crypt_plugin: Document some limitations on encryption algorithms
1 parent 29a7244 commit 2fd6b61

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

source/configuration_manual/mail_crypt_plugin.rst

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,17 @@ provisioned private key. Provisioned private keys can be Elliptic Curve (EC)
4545
keys or RSA Encryption is done using the Integrated Encryption Scheme (IES).
4646
This algorithm is usable both with EC and RSA keys.
4747

48+
Limitations
49+
-----------
50+
51+
Since mail crypt plugin uses AES-GCM, it is limited to encrypting at most 64 GiB
52+
emails (after potential compression).
53+
54+
Fs-crypt plugin has same limitation, but you can use AES-CBC instead if you run
55+
into this problem.
56+
57+
Also, particularly the AES-XTS or AES-CCM cannot be used due to the way they work.
58+
4859
Technical Requirements
4960
======================
5061

0 commit comments

Comments
 (0)