You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cxf.apache.org by GitBox <gi...@apache.org> on 2019/12/06 16:08:16 UTC

[GitHub] [cxf] frelibert opened a new pull request #612: CXF-8177 CXF-8178 ECDH Algorithm Fixes

frelibert opened a new pull request #612: CXF-8177 CXF-8178 ECDH Algorithm Fixes
URL: https://github.com/apache/cxf/pull/612
 
 
   Fixed:
   - [CXF-8177] Support in API for encrypting/decrypting encryptionkey with ECDH Direct Key Agreement
   - [CXF-8177] Support in API for encrypting/decrypting encryptionkey with ECDH Key Wrapping
   - [CXF-8177] Support in API for encrypting/decrypting content with ECDH and AESCBC
   - [CXF-8178] DerivedKey algorithm for ECDH Key Agreement with Key Wrapping according to the RFC 
   
   I added a testsuite I used myself in another project where I compare JWS and JWE of multiple libraries to see whether or not they are compatible with each other using algorithms as defined in RFC 7518 (JWA).
   
   Quite some tests returned errors before my changes. Now they all pass. Some of the tests could be fixed from the clientside perspective using other classes to set key and content encryptionprovider. Others could not be fixed at all. 
   I prefer anyway to use one setup for all which makes it a lot easier from the client's perspective. See the testclasses for this.
   I updated operations in JweUtils for this purpose as some assumptions were made in that class that are only compatible with a subset of the algorithms that are actually supported by the codebase.
   I also added better support for the case that the given JWK object does not define an algorithm (which is optional, according to the spec).
   
   
   
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services