How to get OpenPGP encryption at rest working with Thunderbird?

[33KK]

I created the PGP keypair using Thunderbird, exported the public key, added it on the jmap/crypto page with AES256.
This is what I get in Thunderbird when receiving an email

[mdecimus]

Verify that the public key you used matches your Thunderbird account. Even if the key exists in a different Thunderbird account, it won't work for decrypting messages sent to another one.
Also make sure you are using an RSA key.

[33KK]

This is how I generated the key:

Next I clicked on "Export Public Key To File" and uploaded the key on jmap./crypto with OpenPGP (AES-256) and sent myself an email from GMail, still the same issue

[mdecimus]

I found out what happened. Encryption at rest is working well with the previous version of Thunderbird but, after upgrading to the latest one, I started seeing the same error messages you reported.

I did some debugging I found out that the culprit was the rpgp crate that was encrypting the messages with a subkey that did not have the "use for encryption" flag. The latest version of Thunderbird is stricter and no longer accepts decrypting messages with the wrong subkey. On the rpgp repository there was already an issue opened back in November 2022 reporting this bug and it looks like it won't be fixed anytime soon. For that reason I replaced rpgp with sequoia-pgp and now encryption at rest with OpenPGP is once again working with Thunderbird.

To retest you'll have to recompile the latest version from the repo (or wait a few days until a new binary is released) and upload your public key once again.

[33KK]

Thanks, that's awesome! I'll test it out later.

[33KK]

Yep, it works now, awesome