You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by "Christian Mäder (JIRA)" <ji...@apache.org> on 2016/02/29 12:58:18 UTC
[jira] [Comment Edited] (WSS-572) EncryptedKeyProcessor does not
respect the CryptoProvider when initializing a new Cipher
[ https://issues.apache.org/jira/browse/WSS-572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15171788#comment-15171788 ]
Christian Mäder edited comment on WSS-572 at 2/29/16 11:57 AM:
---------------------------------------------------------------
I would insist on - at least - checking for NoSuchPaddingException as well, because that was the Exception thrown with my provider. (That provider, "nCipherKM", does not support OEAPPadding but only OEAPwithMGF1andSHA1Padding). ~Chris
was (Author: cmaeder-nca):
I would insist on - at least - checking for NoSuchPaddingException as well, because that was the Exception thrown with my provider. (That provider, "nCipherKM", does not support OEAPPadding but only OEAPwithMGF1andSHA1Padding).
> EncryptedKeyProcessor does not respect the CryptoProvider when initializing a new Cipher
> ----------------------------------------------------------------------------------------
>
> Key: WSS-572
> URL: https://issues.apache.org/jira/browse/WSS-572
> Project: WSS4J
> Issue Type: Bug
> Reporter: Christian Mäder
> Assignee: Colm O hEigeartaigh
> Attachments: feature_cipher_from_provider.diff
>
>
> During the decryption I had the problem, that the Cipher was instantiated from BouncyCastle, but my (asymmetric) Key was from a different provider. That's when things excepted in crazy and hard-to-debug ways.
> The attached patch provides a fix in a way that the Cipher is always instantiated from the same provider as the Key. It also does a little bit of refactoring towards code, that is easier to grasp (IMO).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org