notmuch/lib
Daniel Kahn Gillmor 29648a137c crypto: actually stash session keys when decrypt=true
If you're going to store the cleartext index of an encrypted message,
in most situations you might just as well store the session key.
Doing this storage has efficiency and recoverability advantages.

Combined with a schedule of regular OpenPGP subkey rotation and
destruction, this can also offer security benefits, like "deletable
e-mail", which is the store-and-forward analog to "forward secrecy".

But wait, i hear you saying, i have a special need to store cleartext
indexes but it's really bad for me to store session keys!  Maybe
(let's imagine) i get lots of e-mails with incriminating photos
attached, and i want to be able to search for them by the text in the
e-mail, but i don't want someone with access to the index to be
actually able to see the photos themselves.

Fret not, the next patch in this series will support your wacky
uncommon use case.
2017-12-08 08:08:47 -04:00
..
add-message.cc crypto: index encrypted parts when indexopts try_decrypt is set. 2017-10-21 19:53:19 -03:00
built-with.c configure: session key handling in gmime maps to built_with("session_key") 2017-12-04 21:39:50 -04:00
config.cc lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00
database-private.h lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00
database.cc crypto: make shared crypto code behave library-like 2017-10-20 07:58:20 -03:00
directory.cc lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00
filenames.c lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00
index.cc crypto: actually stash session keys when decrypt=true 2017-12-08 08:08:47 -04:00
indexopts.c cli/new, insert, reindex: change index.decrypt to "auto" by default 2017-12-08 08:08:46 -04:00
Makefile fix sum moar typos [build scripts, Makefiles] 2011-06-23 15:44:59 -07:00
Makefile.local build: fix out-of-tree builds, again 2017-09-13 08:48:17 -03:00
message-file.c lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00
message-id.c lib: factor out message-id parsing to separate file. 2017-08-01 21:17:47 -04:00
message-private.h lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00
message-property.cc properties: add notmuch_message_remove_all_properties_with_prefix() 2017-10-20 07:58:43 -03:00
message.cc cli/reindex: destroy stashed session keys when --decrypt=false 2017-12-08 08:08:47 -04:00
messages.c lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00
notmuch-private.h crypto: index encrypted parts when indexopts try_decrypt is set. 2017-10-21 19:53:19 -03:00
notmuch.h crypto: new decryption policy "auto" 2017-12-08 08:07:53 -04:00
notmuch.sym build: switch to hiding libnotmuch symbols by default 2017-05-12 07:17:18 -03:00
parse-time-vrp.cc Use https instead of http where possible 2016-06-05 08:32:17 -03:00
parse-time-vrp.h Use https instead of http where possible 2016-06-05 08:32:17 -03:00
query-fp.cc Use https instead of http where possible 2016-06-05 08:32:17 -03:00
query-fp.h Use https instead of http where possible 2016-06-05 08:32:17 -03:00
query.cc lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00
regexp-fields.cc lib: Add regexp expansion for for tags and paths 2017-05-09 07:44:29 -03:00
regexp-fields.h lib: Add regexp searching for mid: prefix 2017-05-09 07:44:15 -03:00
sha1.c lib: use glib for sha1 digests instead of embedding libsha1 2017-01-08 10:50:38 -04:00
string-list.c lib: add notmuch_message_count_files 2017-08-01 21:17:47 -04:00
string-map.c lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00
tags.c Use https instead of http where possible 2016-06-05 08:32:17 -03:00
thread.cc lib: convert notmuch_bool_t to stdbool internally 2017-10-09 22:27:16 -03:00