This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
secure-email [2017/05/15 08:29] UNKNwYSHSA [Secure Email] |
secure-email [2017/06/19 07:23] (current) JavaCardOS [Usage] |
||
---|---|---|---|
Line 16: | Line 16: | ||
Pretty Good Privacy (PGP) is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for signing, encrypting, and decrypting texts, e-mails, files, directories, and whole disk partitions and to increase the security of e-mail communications.\\ | Pretty Good Privacy (PGP) is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for signing, encrypting, and decrypting texts, e-mails, files, directories, and whole disk partitions and to increase the security of e-mail communications.\\ | ||
PGP and similar software follow the OpenPGP standard (RFC 4880) for encrypting and decrypting data. | PGP and similar software follow the OpenPGP standard (RFC 4880) for encrypting and decrypting data. | ||
- | |||
- | |||
- | =====Preparation===== | ||
- | |||
- | ==== HardWare==== | ||
- | *Smart Card Reader [[https://www.javacardos.com/store/smartcard-reader-r502.php|R502]] * 1 and Java Card [[https://www.javacardos.com/store/javacard-a40cr.php|A40CR]] * 1 or \\ | ||
- | *[[https://www.javacardos.com/store/smartcard_eJavaToken.php|eJavaToken]]* 1 \\ | ||
- | |||
- | |||
- | |||
- | ==== SoftWare==== | ||
- | |||
- | |||
- | |||
- | *1. [[https://www.javacardos.com/javacardforum/download/file.php?id=457|Thunderbird Setup 38.7.0.exe]] \\ | ||
- | *2. [[https://www.javacardos.com/javacardforum/download/file.php?id=455|enigmail-1.9.1-sm+tb.xpi]] \\ | ||
- | *3. [[https://www.javacardos.com/javacardforum/download/file.php?id=456|gpg4win-2.3.0.exe]] \\ | ||
- | *4. [[https://www.javacardos.com/javacardforum/viewtopic.php?f=36&t=25|OpenPGPApplet]]: applet AID: D27600012401 package AID: D2760001240102000000000000010000 \\ | ||
- | |||
- | |||
=====Usage===== | =====Usage===== | ||
- | ==== 1.The Enigmail Installation and usage==== | + | * [[Thunderbird Client Configuration and Enigmail Installation|Thunderbird Client Configuration and Enigmail Installation]] |
- | + | ||
- | Enigmail is a seamlessly integrated security add-on for Mozilla Thunderbird. It allows you to use OpenPGP to encrypt and digitally sign your emails and to decrypt and verify messages you receive. | + | |
- | Enigmail is free and simple interface for OpenPGP email security . It can be freely used, modified and distributed under the terms of the Mozilla Public License. | + | |
- | + | ||
- | + | ||
- | {{Editor/2016-05-16/57398bfd91b25.png}} | + | |
- | + | ||
- | + | ||
- | Click [[https://www.javacardos.com/javacardforum/viewtopic.php?f=36&t=651|here]] to know more details. | + | |
- | + | ||
- | + | ||
- | ==== 2. The Key Management of Enigmail==== | + | |
- | + | ||
- | Once you have Enigmail and GnuPG on your system, you need to populate it with keys: it's pretty useless without them. You need to have your own key pair in order to sign messages and allow anybody to send encrypted messages to you. Furthermore, you will need the public key of a person in order to send that person an encrypted message, or to verify the signature in a message sent by that person. | + | |
- | \\ Note: Enigmail using gpg tool of gpg2.exe program to encrypt or decrypt message, you can find it from ".\Program Files\GNU\GnuPG\pub\ ". | + | |
- | + | ||
- | Click[[https://www.javacardos.com/javacardforum/viewtopic.php?f=36&t=652| here]] to know more details. | + | |
+ | It can be divided into two kinds of secure email according to the mail security level. | ||
- | ==== 3.Combine SmartCard with Enigmailto come into secure e-mail.==== | + | 1. Combine Enigmail with GnuPG to send encrypted messages and sign messages. \\ |
+ | 2. Combine SmartCard and Enigmail to send encrypted messages and sign messages. Encrypting message does not require smart card, but decrypting message must use smart card. Email content and session key are transmitted after encrypted. Thus even if attackers intercept the information, they cannot understand the message or decrypt the message. This makes the mail much securer. | ||
- | Generally, support for OpenPGP encryption and signing message is provided by Enigmail, and in here, You can using OpenPGP encryption and signing message with SmartCard. | ||
- | Click [[https://www.javacardos.com/javacardforum/viewtopic.php?f=36&t=653|here ]] to know more details. | + | * [[1.The Key Management of Enigmail|1.The Key Management of Enigmail]]\\ |
+ | * [[2.Combine SmartCard with Enigmail to come into secure e-mail|2.Combine SmartCard with Enigmail to come into secure e-mail]] | ||