Skip to content

Commit 16b3f04

Browse files
committed
mail_crypt: Document some limitations on encryption algorithms
1 parent f6ef8c8 commit 16b3f04

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

docs/core/plugins/mail_crypt.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,14 @@ Provisioned private keys can be Elliptic Curve (EC) keys or RSA Encryption
6262
is done using the Integrated Encryption Scheme (IES). This algorithm is
6363
usable both with EC and RSA keys.
6464

65+
## Limitations
66+
67+
By default, AES-GCM is used. This algorithm is limited to 64 GiB input, after
68+
potential compression. If you expect to run to this limitation, you should use
69+
AES-CBC or ChaCha20-Poly1305 algorithm.
70+
71+
Also, particularly the AES-XTS or AES-CCM cannot be used due to the way they work.
72+
6573
## Technical Requirements
6674

6775
Using per-folder keys is not considered production quality, but global keys

0 commit comments

Comments
 (0)