EnvelopedData
The encryption building block of CMS, the confidentiality mode of S/MIME and AS2.
Definition
EnvelopedData encrypts the content once with a symmetric session key, then encrypts that key for each recipient (RecipientInfo). The recipient decrypts the session key with its private key, then the content. This is the mechanism behind smime-type=enveloped-data used to encrypt an EDI payload in AS2.
Origin
Defined in section 6 of RFC 5652 (Cryptographic Message Syntax, IETF, 2009), derived from PKCS#7.
Example in context
EnvelopedData ::= SEQUENCE { version, recipientInfos SET OF RecipientInfo, encryptedContentInfo }
Related terms
- SignedData — the CMS signing counterpart.
- application/pkcs7-mime — carrier S/MIME body.