Encrypted/Unscannable Messages

Good Afternoon,
We have a sender that is sending PGP Encrypted .pdf files to us. The e-mail and attachment "pass" the test for Encrypted Messages because Ironport allows PGP encryption. The problem is our next step in the Anti-Virus process. The Unscannable rule "flags" this e-mail because it can't scan the attachment because of the encryption.
Is there a "workaround" that we could implement so this wouldn't happen?
Thanks,
Doug

Since the attachment is encrypted it cannot be intelligently scanned.
The only option I can see in the ironport C-Series is to change the Incoming Mail Policy, Antivirus, Encrypted and/or Unscannable Messages Action to Deliver. If you don't want to do this for everyone, create a separate policy group for this sender where the above is done.
I'm not too familiar with Ironport Encryption Appliance. Some systems of that type allow managing keys for specific external email addresses, though they are generally geared for outbound email flow they do handle replies.

Similar Messages

Break up the Virus quarantine into two Encrypted & Unscannable?

Currently Encrypted attachments and Unscannable attachments end up in the same Virus quarantine, is there a way to split them up into two separate quarantines one called Encrypted the other Unscannable for example.

Hi Greg,
there is no direct way to archive this, but it is possible via content filters. Basically you need to do three things:
1. Create your quarantines for the enrypted and unscannable verdicts, for that you maybe need to reduce the size of the other system quarantines to make room for the new quarantines.
2. In the mail policy settings (inbound and/or outbound, wherever you have antivirus enabled), configure the antivirus settings to "Deliver as is" for the Encrypted and Unscannable Messages. Also, under the advanced options for both message types, add a custom header and result, i.e AVRESULT, ENCRYPTED.
3. Create two content filters matching on each of these headers, with a quarantine action where you select the specific quarantine you have created in step one.
Submit and commit.
Hope that helps,
Andreas

Invalid Certificate Microsoft Outlook cannot sign or encrypt this message because you have no certificates which can be used to send from your e-mail address.

Hi,
I have a problem when trying to sign emails with an X.509 certificate in Outlook 2010. I constantly get the error message. The certificate is Verified for the email address I'm sending from.
"Invalid Certificate
Microsoft Outlook cannot sign or encrypt this message because you have no certificates which can be
used to send from your e-mail address."I have no problem with signing documents in Word 2010 with the same certificate, only when trying to send email.Every check I can perform confirms that there's nothing wrong with the certificate. Yet, Outlook still says it is invalid.I have even tried installing a second X.509 for the same email address just to check. Outlook doesn't seem to like either certificate.I know this has been posted before, but I'm completely stuck here.Thanks,~Dan

Hi,
You may have checked the option "Encrypt contents and attachments for outgoing messages" in Outlook, please uncheck this to test if the problem persists.
File -> Options -> Trust Center -> Trust Center Settings -> E-mail Security -> Clear the checkbox "Encrypt contents and attachments for outgoing messages" -> OK.
Regards,
Melon Chen
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs. Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Encrypting a message digest

Hi I'm trying to encrypt a message digest using RSA Encryption. For some reason when the encrypted message digest is decrypted it does not match the original. If this is hard to follow the following code illustrates this point:
String input = "Testing message";
MessageDigest hash = MessageDigest.getInstance("SHA1");
hash.update( input.getBytes() );
generator.initialize(512, random);
KeyPair pair = generator.generateKeyPair();
Key pubKey = pair.getPublic();
Key privKey = pair.getPrivate();
cipher.init(Cipher.ENCRYPT_MODE, privKey); // encrypt
byte[] cipherText = cipher.doFinal( hash.digest() );
// now decrypt
cipher.init(Cipher.DECRYPT_MODE, pubKey);
byte[] plainText = cipher.doFinal(cipherText);Here the byte array plainText does not match the original message digest from hash.digest() Any help on how to correct this problem would be great.
thanks
-B
Edited by: BenWhethers on Dec 13, 2007 12:49 PM
Edited by: BenWhethers on Dec 13, 2007 12:50 PM

You don't provide testable code so I have made a guess as to the missing code and for me the decrypted digest is the same are the original.
        Cipher cipher = Cipher.getInstance("RSA");
        SecureRandom random = new SecureRandom();
        KeyPairGenerator generator = KeyPairGenerator.getInstance("RSA");
        String input = "Testing message";
        MessageDigest hash = MessageDigest.getInstance("SHA1");
        hash.update( input.getBytes() );
        generator.initialize(512, random);
        KeyPair pair = generator.generateKeyPair();
        Key pubKey = pair.getPublic();
        Key privKey = pair.getPrivate();
        cipher.init(Cipher.ENCRYPT_MODE, privKey); // encrypt
        byte[] digest = hash.digest();
        byte[] cipherText = cipher.doFinal( digest );
        // now decrypt
        cipher.init(Cipher.DECRYPT_MODE, pubKey);
        byte[] plainText = cipher.doFinal(cipherText);
        System.out.println(Arrays.equals(plainText,digest ));

Signing and encrypting the message

Hi all,
How we can do signing and encryption of message with multiple certificates at XI adapter.As it's a XI adapter,we can't use adapter modules for this purpose..
What's the other way around?Any Clues..??
Thanks,
Anoop

I want signed and encrypted file on my target side from my second XI server.But i have to use FTPS receiver adapter at my second XI server.Now while encrypting my msz,i m have to use multiple certificates.The problem and limitation is, that the FTPS adapter is only taking/accepting the first SOAP attachment and is ignoring any further. This means, that the attached signature would be ignored by FTPS adapter.So, m validating the same at my First XI server so that it goes a single message to my second XI server.Hope it's clear now..
Thanks,
Anoop

Is it possible to send encrypted email messages using cfmail ?

Does anyone know of a way to send an encrypted email message
using CF?

Sending an encrypted message is easy. The hard part is
enabling the recipient to decrypt it.

Spotlight Searches of Encrypted Mail Messages

Greetings,
Is there a way to get Spotlight to search the contents of encrypted mail messages?
I have a number of messages in my Mail folders that have been signed with Digital IDs. Spotlight will not search the contents of these messages (headers and subjects seem to be ok).
I have tried checking the "Encrypted Messages" in preferences and have reindexed the Mail folder with no luck.
Thanks.
Mac OS X (10.4.8)

On the top of my head, I would suggest that you could search for sender, date, etc., in encrypted emails, but as the contents is encrypted, you would need to know the makeup of the encryption. For example, if you were looking for a message with the word "warning", you would have to type in the encryption, e.g., "%r^:&x$' of that word to find it. Otherwise why encrypt the contents in the first place.
If for example, Spotlight could find by contents in an encrypted message, anyone who can intercept you email would be able to read your mail.

SecurityMode.TransportWithMessageCredential Binding does not encrypt the message

When I send a message with SecurityMode.TransportWithMessageCredential Binding (over https), I can see the decrypted message in the service log file. Isn't the message supposed to be encrypted?
Bob

Hi Bob12543,
In the TransportWithMessageCredential security mode, message security is used to authenticate the client and transport security is used to authenticate the server and provide message confidentiality and integrity, so the encryption
and signature are ensured at the transport layer. However the transport security mode secures the transfor not the message itself.
For more information, please try to refer to the following:
https://msdn.microsoft.com/en-us/library/ms735093.aspx .
A similar thread:
https://social.msdn.microsoft.com/Forums/vstudio/en-US/fb39d649-f28e-4803-83a7-6aa7c6ca3673/messages-not-encrypted-using-transportwithmessagecredential?forum=wcf
Best Regards,
Amy Peng
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Is there a way to include S/MIME encryption on messages sent from the Photos app?

I have encryption set up and working on my Exchange account, but I also want to send attachments with the encrypted messages. When I try to send images as attachments by selecting the "share" option in the Photos app,the message that is created does not indicate encryption. Is there a way to attach files in the Email app without going through the Photos app? Or is there a way to apply envcryption to the Photos app email configuration?

If you want the virtual device to work you are going to need NI-DAQmx. DAQmx has all the information that "virtual device" needs to actually run, be testable, etc.
StuartG

"Bad Encrypt Dictionary" message

My customers are suddenly getting the message "Bad Encrypt Dictionary" when trying to open our PDF catalog on our website. I tried opening the catalog from my computer and it opens just fine. I'm using IE8 and Acrobat 9 Pro. Not sure if any of that makes a difference. If anyone can shed some light on this issue I'd really appreciate it.

I had a similar issue. Here's what I did:
(1) Save the PDF so it can be "read" by at least adobe 6. Go to File>reduce file size> click on adobe 6.
(2) Post this new file to the web.
(3) You can also provide a link to the most uppdated reader and give your customers an option to download the most updated reader, even if they have adobe acrobat.
What's happening is that they likely have an older version of adobe acrobat and that version will not "read" the catalog you created in either the newest or newer version of adobe.
At least this has been my expereince.
Hope it helps.

Jax-ws: Encrypt at message level, not using SSL

Hello everyone,
I have a non functional requisite that is very hard to accomplish. I have an architecture like the following: a Tomcat (web) that calls webservices that runs in a Weblogic or JBoss. The easiest solution for encrypting the communication I think is using SSL with an integration user (login/password).
Well, the client wants the following: encrypt and sign the message at message level, not at transport level. I am using jax-ws as webservice technology.
I am trying with Metro, but it is difficult to make it work in weblogic (and I suppose worse in JBoss).
Any ideas?
Thanks in advance.

Hi David,
Many thanks! I appear to have completely missed that artical while seaching for a solution. I have run through the steps, and the replica appears to be using SSL OK, in as much I can connect to it using SSL.
I have looked at the communication between the master & replica, and it appears that they are still using port 389 for comms, which surgests that replication traffic between the two servers is still unencrypted, which seems a little odd, again have I missed something?
Regards
Matt

If i want to encrypt a message that i send to Java Card applet like DES

What are the steps that i have to do ?? is there something missing??
//set the private key
private byte[] KeyData = {0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29,
           0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,0x39, 0x40};
deskey = (DESKey)KeyBuilder.buildKey(KeyBuilder.TYPE_DES_TRANSIENT_DESELECT,
KeyBuilder.LENGTH_DES, false);
deskey.setKey(KeyData, (short)0);
//InData and OutData are two byte variables for the input message and the //Output message
Cipher cipher;
cipher = Cipher.getInstance(Cipher.ALG_DES_CBC_NOPAD ,false);
cipher.init(deskey, Cipher.MODE_ENCRYPT);
cipher.doFinal((byte[])InData,(short) 0 , (short) InData.length,(byte[]) OutData,(short) 0);
is that correct? or needs something else?
if i set fixed size for Outdata byte i have to do Padding since i choose (ALG_DES_CBC_NOPAD) method??? in order to send the cipher back to host application Thru APDU command??
How big can the cipher become with the key i used if InData are byte[10]
Thanks in advance

I tried too many corrections and i still get unknown error
i tried this code this time
package gr.teiath.netlab.applets;
import javacard.framework.*;
import javacard.security.DESKey;
import javacard.security.KeyBuilder;
import javacardx.crypto.Cipher;
public class MedBooklet extends Applet {
     final static byte MedBooklet_CLA = (byte) 0xB0;
     // PIN relatives
     final static byte PIN_TRY_LIMIT = (byte) 0x03;
     final static byte MAX_PIN_SIZE = (byte) 0x04;
     OwnerPIN pin;
     //DES
     byte keyArray[] = {(byte)0x09,(byte)0x0e,(byte)0x0d,(byte)0x0c,(byte)0x0b,(byte)0x0a,(byte)0x09,(byte)0x08,
               (byte)0x09,(byte)0x0e,(byte)0x0d,(byte)0x0c,(byte)0x0b,(byte)0x0a,(byte)0x09,(byte)0x08,
               (byte)0x09,(byte)0x0e,(byte)0x0d,(byte)0x0c,(byte)0x0b,(byte)0x0a,(byte)0x09,(byte)0x08};
     private byte[] outBuff;
     private short Lc;
     // allocate key object
     DESKey desKey;
     Cipher cipher;
     // Return codes
     final static short SW_VERIFICATION_FAILED = 0x6300;
     // INS commands
     final static byte VERIFY = (byte)0x20;
     final static byte ADDRECENTRY = (byte)0x30;
     final static byte READRECENTRY = (byte)0x40;
     //private RecipeFile recipeFile;
     //private ReferFile referFile;
     private MedBooklet(byte[] bArray, short bOffset, byte bLength) {
          pin = new OwnerPIN(PIN_TRY_LIMIT,MAX_PIN_SIZE);
          pin.update(bArray, bOffset, bLength);
          desKey = (DESKey)KeyBuilder.buildKey(KeyBuilder.TYPE_DES,KeyBuilder.LENGTH_DES,false);
          // set key value
          desKey.setKey(keyArray,(short)0x00);
          //recipeFile = new RecipeFile();
          //referFile = new ReferFile();
          register();
     public static void install(byte[] bArray, short bOffset, byte bLength) {
          new MedBooklet(bArray,bOffset,bLength);
     public boolean select() {
          if(pin.getTriesRemaining()==0) return false;
          return true;
     public void deselect() {
          pin.reset();
     public void process(APDU apdu) {
          byte[] buffer = apdu.getBuffer();
          if ((buffer[ISO7816.OFFSET_CLA]==0) && (buffer[ISO7816.OFFSET_INS])== (byte) 0xa4) return;
          if (buffer[ISO7816.OFFSET_CLA]!=MedBooklet_CLA)
               ISOException.throwIt(ISO7816.SW_CLA_NOT_SUPPORTED);
          switch (buffer[ISO7816.OFFSET_INS]) {
          case ADDRECENTRY: addrec(apdu);
               return;
          case READRECENTRY: readrec(apdu);
               return;
          case VERIFY: verify(apdu);
               return;
     public void addrec(APDU apdu){
          //byte[] buffer = apdu.getBuffer();
          //byte byteRead = (byte) (apdu.setIncomingAndReceive());
          //if (byteRead==0x1f)
               //recipeFile.newRecord(buffer, ISO7816.OFFSET_CDATA, (short) byteRead);
//           create cipher instance
          cipher = Cipher.getInstance(Cipher.ALG_DES_ECB_NOPAD,false);
          byte[] buf = apdu.getBuffer();
          Lc = (short) (buf[ISO7816.OFFSET_LC] & 0x00FF);
          //     array storing output buffer
          outBuff = new byte[Lc];
          // initialize cipher
          cipher.init(desKey,Cipher.MODE_ENCRYPT);
          Lc = cipher.doFinal(buf,(short)ISO7816.OFFSET_CDATA,Lc,outBuff,(short)0x00);
          // set output to be returned with same size of the input
          apdu.setOutgoing();
          apdu.setOutgoingLength(Lc);
          apdu.sendBytesLong(outBuff,(short)0x00,Lc);
     public void readrec(APDU apdu) {
          byte[] buffer = apdu.getBuffer();
          short le = apdu.setOutgoing();
        apdu.setOutgoingLength( (short) (35) );
        // echo header
        //apdu.sendBytes( (short)0, (short) 5);
        // echo data
       // apdu.sendBytesLong( recipeFile.getRecord() , (short) 0, (short) 35 );
     private void verify(APDU apdu) {
          byte[] buffer = apdu.getBuffer();
          byte byteRead = (byte) (apdu.setIncomingAndReceive());
          if (pin.check(buffer, ISO7816.OFFSET_CDATA, byteRead)== false)
               ISOException.throwIt(SW_VERIFICATION_FAILED);
}I have another Problem When in constructor i try to
cipher = Cipher.getInstance(Cipher.ALG_DES_ECB_NOPAD,false);I cant veriry the PIN so i always get exit command are there conflicts when are in the same constructor between
pin.update(bArray, bOffset, bLength);
VS
cipher = Cipher.getInstance(Cipher.ALG_DES_ECB_NOPAD,false);
VS
register();Are there Limitations about "Cref" do i have to send the data to be encrypted no more than byte of 8 hex ?

Encrypt xml message in receive pipeline

Hi,
I am new to biztalk .
I have a requirement where i need to encrypt the xml message in the receive pipeline.I know i have to develop a custom pipeline component to do this but i don't know in which stage of receive pipeline should i place this component in?
please advice .
Thanks in advance

Hi Rose,
To decrypt the message in receive pipeline and you will place the custom pipeline component in Decode stage
of the receive pipeline and encryption will be done at send pipeline and you will place the custom pipeline component in Encode stage of the send pipeline.
Decryption at receive pipeline:
Encryption at
send pipeline:
BizTalk
Server 2013: Encrypting and Decrypting a Message
You can also refer the MSDN articles on how to decrypt and
encrypt message in BizTalk.
How to Configure BizTalk Server for Receiving Encrypted Messages
How to Configure BizTalk Server for Sending Encrypted Messages
Rachit
Please mark as answer or vote as helpful if my reply does

.Mac account to encrypt Mail messages

If you look at this posting, you can use your .Mac certificate for your Mail program. The readers of this message posted possitive results to this hint. I however do not have the erncyption and digital signing boxes as described. Any suggestions?
http://www.macosxhints.com/article.php?story=20051121134558157

There are two systems of encryption/signing in widespread use:
One is PGP/GPG, with plug-ins as above.
The other is X.509.
They both offer (at least part of) the same algorithms, but packaged differently.
Now .Mac uses X.509, and this is integrated into Mail. But you can get X.509 certificates from a number of companies, often for free (Thawte is one of them , SwissSign over here too etc). You need the proper certificates in Keychain access, often Mail will do that for you. If the root certificate for a certificate is not yet in the trusted database, it needs to be imported into the X509 keychain (option when double clicking the file in Mac OS X).
I still have trouble as have others to get those certificates working in Mail (the are deemed valid by Keychain access). The checkboxes to encrypt and sign just do not show up in Mail even if the certificates (keys) are available in Keychain access for the very e-mail addresses I want to sent something. Strange - but then my Powerbook is currently in repair because of a hard disk problem.
PGP/GPG works similarly but needs to be installed. GPGMail is a nice plug in for Mail. Many people use it. See http://www.sente.ch/software/GPGMail/English.lproj/GPGMail.html for it, and a link to the rest of the needed software. I got this working like a charm.
HTH
Marc
12" PB G4/1.2GHz- 17" PB G4/1.67GHz - 12" iB G3/500 MHz Mac OS X (10.4.4)

Encrypt the message in SMS

Hi,
I need to send SMS such that, the user message(from pc) need to be encrypted by an algorithm(the algorithm available in SIM) and send via a modem/phone (gsm,cdma). At the receiving end on receiving the SMS the SIM itself should identify that the message is encrypted, what algorithm should be used to decrypt and decrypt the message.
Only at the sending end I should have my application and at the receiving end my application wont be there. The SIM itself should take care of decryption.
I read about the sms protocol format www.dreamfabric.com/sms . This link says the format for normal SMS and not for encrypted message.
On using sim toolkit the message would be encrypted and that would set the protocol with additional fields as algorithm used to encrypt, key used to encrypt..etc.
If I am not clear say me, I try to post accordinglly.
Try to suggest me how to procced with this...
Thanks in advance!

May have solved my own issue.
Mailbox>Rebuild fixed the weirdness I described above.
I'm still not sure about other quirkyness, like the fact that messages I delete, don't synchronize with the web interface for a long, long time -- even when you force synch.
But hey, as long as I can read the messages I'm trying to that's a step in the right direction.

Encrypted/Unscannable Messages

Similar Messages

Maybe you are looking for