I don’t know the exact process that handles the encryption/decryption but yes I believe it would have to be windows and not your email client (and definitely not avast!).