(CkPython) Send aes-gcm authEnvelopedData Encrypted Email

See more SMTP Examples

Note: This example requires Chilkat v10.0.0 or later

Demonstrates how to send encrypted email using 128-bit AES in GCM mode.

"AES-GCM" (Advanced Encryption Standard - Galois/Counter Mode) is a cryptographic algorithm that provides both encryption and integrity protection (authentication). When used in the context of email security with "authEnvelopedData", it often refers to a method of securely sending encrypted and authenticated email content.

Here’s a brief breakdown:

• AES-GCM: Combines symmetric encryption (AES) with authentication, ensuring both the confidentiality and integrity of the message. It generates an authentication tag to detect any unauthorized changes.
• authEnvelopedData: Refers to a type of structure used in secure email protocols (like S/MIME) to package encrypted content. It contains the encrypted data and associated encrypted session keys.
• Email Security: When applied to emails, AES-GCM ensures the email content is encrypted (confidential) and also tamper-resistant (authenticated), with the encryption keys typically shared securely using asymmetric encryption (e.g., public key infrastructure, or PKI).

In short, AES-GCM with "authEnvelopedData" provides a way to encrypt and authenticate emails, making them confidential and resistant to tampering.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# The mailman object is used for sending and receiving email.
mailman = chilkat.CkMailMan()

mailman.put_SmtpHost("smtp.example.com")

mailman.put_SmtpUsername("my_smtp_login")
mailman.put_SmtpPassword("my_smtp_password")

# The typical SMTP ports are 465 for implicit SSL/TLS or 587 for explicit SSL/TLS
mailman.put_SmtpPort(465)
mailman.put_SmtpSsl(True)

# Use the recipient's certificate for encryption.
cert = chilkat.CkCert()
success = cert.LoadFromFile("c:/someDir/recipient_cert.cer")
if (success != True):
    print(cert.lastErrorText())
    sys.exit()

email = chilkat.CkEmail()

email.put_Subject("This email is encrypted")
email.put_Body("This is AES-GCM encrypted mail")
email.put_From("Mary <mary@example1.com>")
success = email.AddTo("Joe","joe@example.com")

# Specify that AES-GCM w/ authEnvelopedData is to be used. 
# Also specify other params..
email.put_Pkcs7CryptAlg("aes-gcm")
email.put_Pkcs7KeyLength(128)
email.put_OaepPadding(True)
email.put_OaepHash("sha256")
email.put_OaepMgfHash("sha256")

# Indicate the email is to be sent encrypted.
email.put_SendEncrypted(True)

# Specify the certificate to be used for encryption.
success = email.SetEncryptCert(cert)

success = mailman.SendEmail(email)
if (success != True):
    print(mailman.lastErrorText())
else:
    print("Mail Sent!")