[Pkg-mozext-maintainers] Bug#881022: Fwd: Enigmail is very slow to check signatures
Andreas Glaeser
bugs at irregulaire.info
Tue Nov 7 07:17:47 UTC 2017
Package: enigmail
Version: 2:1.9.8.1-1~deb9u1
Severity: minor
Dear Maintainer,
the main problem seems to be her, that generally crypto-code is not parallelised. For
example as in my case on a low-end 25W-PC or on notebooks an other embedded devices,
there is one compute-core used only for checking DSA-signatures in Thunderbird
with Enigmail, although 3 or 4 are available. So some things are much slower in practice
than they could be.
It is understandable, that there are security concerns, about parallelizing crypto-code
and it should not be auto-parallelized, because users could well go devoid of their
data-integrity and one might well give away code-reliability for speed. That is of course
not recommendable.
> -------- Forwarded Message --------
> Subject: Fwd: Enigmail is very slow to check signatures
> Date: Sat, 14 Oct 2017 09:58:00 +0200
> From: Andreas Glaeser <andreas.glaeser at irregulaire.info>
> To: enigmail-users at enigmail.net
>
> > andrew at a68n:~$ ate show enigmail
> > Package: enigmail
> > Version: 2:1.9.8.1-1~deb9u1
> > State: installed
> > Automatically installed: no
> > Priority: optional
> > Section: mail
> > Maintainer: Debian Mozilla Extension Maintainers
> > <pkg-mozext-maintainers at lists.alioth.debian.org> Architecture: all
> > Uncompressed Size: 5,917 k
> > Depends: gnupg (>= 2) | gnupg2, gnupg-agent, thunderbird (>= 1:52.0) | icedove (>=
> > 1:52.0)
> > Recommends: pinentry-x11
> > Breaks: icedove (< 1:52.0), thunderbird (< 1:52.0)
> > Enhances: icedove, thunderbird
> > Provides: icedove-enigmail, thunderbird-enigmail, xul-ext-enigmail
> > Description: GPG support for Thunderbird and Debian Icedove
> > OpenPGP extension for Thunderbird. Enigmail allows users to access the features
> > provided by the popular GnuPG software from within Thunderbird.
> >
> > Enigmail is capable of signing, authenticating, encrypting and decrypting email.
> > Additionally, it supports both the inline PGP format, as well as the PGP/MIME
> > format as described in RFC 3156.
> > Homepage: https://www.enigmail.net/
> > Tags: interface::graphical, interface::x11, mail::user-agent, role::plugin,
> > security::authentication, security::cryptography, security::integrity,
> > security::privacy, suite::mozilla, uitoolkit::TODO, use::checking,
> > works-with::mail
>
> > andrew at a68n:~$ ate show thunderbird
> > Package: thunderbird
> > Version: 1:52.3.0-4~deb9u1
> > State: installed
> > Automatically installed: yes
> > Priority: optional
> > Section: mail
> > Maintainer: Christoph Goehre <chris at sigxcpu.org>
> > Architecture: amd64
> > Uncompressed Size: 109 M
> > Depends: debianutils (>= 1.16), fontconfig, psmisc, x11-utils, libatk1.0-0 (>=
> > 1.12.4), libc6 (>= 2.17), libcairo-gobject2 (>= 1.10.0), libcairo2 (>=
> > 1.10.2-2~), libdbus-1-3 (>= 1.9.14), libdbus-glib-1-2 (>= 0.78),
> > libevent-2.0-5 (>= 2.0.10-stable), libffi6 (>= 3.0.4), libfontconfig1 (>=
> > 2.11), libfreetype6 (>= 2.2.1), libgcc1 (>= 1:4.0), libgdk-pixbuf2.0-0 (>=
> > 2.22.0), libglib2.0-0 (>= 2.31.8), libgtk-3-0 (>= 3.4), libhunspell-1.4-0,
> > libpango-1.0-0 (>= 1.14.0), libpangocairo-1.0-0 (>= 1.14.0),
> > libpangoft2-1.0-0 (>= 1.14.0), libpixman-1-0 (>= 0.19.6),
> > libstartup-notification0 (>= 0.8), libstdc++6 (>= 5.2), libvpx4 (>= 1.6.0),
> > libx11-6, libx11-xcb1, libxcb-shm0, libxcb1, libxcomposite1 (>= 1:0.3-1),
> > libxdamage1 (>= 1:1.1), libxext6, libxfixes3, libxrender1, libxt6, zlib1g
> > (>= 1:1.2.3.4)
> > Recommends: lightning (= 1:52.3.0-4~deb9u1), myspell-en-us | hunspell-dictionary |
> > myspell-dictionary
> > Suggests: apparmor, fonts-lyx, libgssapi-krb5-2
> > Breaks: enigmail (< 2:1.9.8.1-1~), hunspell-ar (< 0.0.0+20080110-1.1), hunspell-da
> > (< 1:3.1.0-3), hunspell-de-at (< 20071211-2), hunspell-de-ch (< 20071211-2),
> > hunspell-de-de (< 20071211-2), hunspell-de-med (< 20090825-1),
> > hunspell-en-ca (< 1:3.1.0-3), hunspell-en-us (< 20070829-3), hunspell-fr (<
> > 1:3.1.0-3), hunspell-gl-es (< 2.2a-6), hunspell-hu (< 1:3.1.0-3),
> > hunspell-ko (< 0.3.3-1), hunspell-ne (< 1:3.1.0-3), hunspell-se (<
> > 1.0~beta6.20081222-1.1), hunspell-sh (< 1:3.1.0-3), hunspell-sr (<
> > 1:3.1.0-3), hunspell-uz (< 0.6-3.1), hunspell-vi (< 1:3.1.0-3), icedove (<
> > 1:45.6.0-2.1~), lightning (< 1:52.3.0-4~deb9u1), myspell-af (< 1:3.1.0-3),
> > myspell-ca (< 0.6-8), myspell-cs-cz (< 20040229-4.1), myspell-da (<
> > 1.6.18-1.1), myspell-de-at (< 20071211-2), myspell-de-ch (< 20071211-2),
> > myspell-de-de (< 20071211-2), myspell-de-de-oldspell (< 1:2-25.1),
> > myspell-el-gr (< 0.3-1.1), myspell-en-au (< 2.1-5), myspell-en-gb (<
> > 1:3.1.0-3), myspell-en-us (< 1:3.1.0-3), myspell-en-za (< 1:3.1.0-3),
> > myspell-eo (< 2.1.2000.02.25-41), myspell-es (< 1.10-7), myspell-et (<
> > 1:20030606-12.1), myspell-fa (< 0.20070816-2), myspell-fi (< 0.7-17.2),
> > myspell-fo (< 0.2.36-3), myspell-fr (< 1.4-25), myspell-fr-gut (<
> > 1:1.0-26.1), myspell-ga (< 2.0-19), myspell-gd (< 0.50-7), myspell-gv (<
> > 0.50-8), myspell-hr (< 20060617-2), myspell-hu (< 0.99.4-1.2), myspell-hy (<
> > 0.10.1-1.1), myspell-it (< 1:3.1.0-3), myspell-ku (< 0.20.0-1.1), myspell-lv
> > (< 0.7.3-3.1), myspell-nb (< 2.0.10-3.1), myspell-ne (< 1.0-4.1), myspell-nl
> > (< 1:1.10-3), myspell-nn (< 2.0.10-3.1), myspell-pl (< 20090830-1),
> > myspell-pt-br (< 2009.03.30-1.1), myspell-pt-pt (< 20090309-1.1), myspell-ru
> > (< 0.99g5-8.1), myspell-sk (< 0.5.5a-2.1), myspell-sv-se (< 1.3.8-6-2.2),
> > myspell-sw (< 1:3.1.0-3), myspell-th (< 1:3.1.0-3), myspell-tl (< 0.4-0-5),
> > xul-ext-compactheader (< 2.1.0~), xul-ext-foxyproxy-standard (<
> > 4.5.6-debian-2~)
> > Replaces: icedove (< 1:45.6.0-2.1~)
> > Provides: icedove, mail-reader
> > Description: mail/news client with RSS, chat and integrated spam filter support
> > Thunderbird is an mail client suitable for free distribution. The goal of
> > Thunderbird is to produce a cross platform stand-alone mail application using the
> > XUL user interface language. It supports different mail accounts, no matter of the
> > used protocol like POP(s) or IMAP(s), has an integrated learning Spam filter, and
> > offers easy organization of mails with tagging and virtual folders. Also, more
> > features can be added by installing extensions.
> >
> > The goal of Thunderbird is to produce a cross platform standalone mail application
> > using the XUL user interface language.
> > Homepage: http://www.mozilla.org/thunderbird/
> > Tags: mail::user-agent, role::dummy, suite::mozilla
>
>
>
> -------- Forwarded Message --------
> Subject: Enigmail is very slow to check signatures
> Date: Fri, 13 Oct 2017 10:04:41 +0200
> From: Andreas Glaeser <andreas.glaeser at irregulaire.info>
> To: enigmail-users at enigmail.net
>
>
> Enigmail is so slow to check signatures, that it makes large attachments
> practically impossible to re-check with Thunderbird on low-end PC. I
> suspect the hashing-algorithm is too slow, it may be due to
> double-hashing. Evolution for example is configurable in this respect,
> i.e. which SHA-variant one wants to use, Enigmail is not. SHA256 should
> be sufficient in any case.
-- System Information:
Debian Release: 9.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.13.4-ad-bpo (SMP w/3 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en
(charmap=UTF-8) Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages enigmail depends on:
ii gnupg 2.1.18-8~deb9u1
ii gnupg-agent 2.1.18-8~deb9u1
ii gnupg2 2.1.18-8~deb9u1
ii icedove 1:52.3.0-4~deb9u1
ii thunderbird [icedove] 1:52.3.0-4~deb9u1
Versions of packages enigmail recommends:
ii pinentry-gnome3 [pinentry-x11] 1.0.0-2
ii pinentry-gtk2 [pinentry-x11] 1.0.0-2
ii pinentry-qt [pinentry-x11] 1.0.0-2
enigmail suggests no packages.
-- no debconf information
More information about the Pkg-mozext-maintainers
mailing list