You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pdfbox.apache.org by "Pierrick Vandenbroucke (Jira)" <ji...@apache.org> on 2020/02/25 07:47:00 UTC
[jira] [Updated] (PDFBOX-4784) Possibility to provide the
SecureRandom to SecurityHandler
[ https://issues.apache.org/jira/browse/PDFBOX-4784?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Pierrick Vandenbroucke updated PDFBOX-4784:
-------------------------------------------
Description:
In DSS, we build electronic signatures with two stateless operations (computation of the data to be signed and incorporation of the signature value). Currently, the signature creation fails with encrypted documents (AES) due to the Initialization Vector generations which produce different values at each call.
We would need a way to "stabilize" this part. We discussed about that on our [issue tracker|https://ec.europa.eu/cefdigital/tracker/browse/DSS-1962] and the idea would be to provide a custom instance of the SecureRandom to the [SecurityHandler|https://github.com/apache/pdfbox/blob/2.0.19/pdfbox/src/main/java/org/apache/pdfbox/pdmodel/encryption/SecurityHandler.java#L381].
was:
In DSS, we build electronic signatures with two stateless operations (computation of the data to be signed and incorporation of the signature value). Currently, the signature creation fails with encrypted documents (AES) due to the Initialization Vector which generates different values at each call.
We would need a way to "stabilize" this part. We discussed about that on our [issue tracker|https://ec.europa.eu/cefdigital/tracker/browse/DSS-1962] and the idea would be to provide a custom instance of the SecureRandom to the [SecurityHandler|https://github.com/apache/pdfbox/blob/2.0.19/pdfbox/src/main/java/org/apache/pdfbox/pdmodel/encryption/SecurityHandler.java#L381].
> Possibility to provide the SecureRandom to SecurityHandler
> ----------------------------------------------------------
>
> Key: PDFBOX-4784
> URL: https://issues.apache.org/jira/browse/PDFBOX-4784
> Project: PDFBox
> Issue Type: Improvement
> Reporter: Pierrick Vandenbroucke
> Priority: Major
>
> In DSS, we build electronic signatures with two stateless operations (computation of the data to be signed and incorporation of the signature value). Currently, the signature creation fails with encrypted documents (AES) due to the Initialization Vector generations which produce different values at each call.
> We would need a way to "stabilize" this part. We discussed about that on our [issue tracker|https://ec.europa.eu/cefdigital/tracker/browse/DSS-1962] and the idea would be to provide a custom instance of the SecureRandom to the [SecurityHandler|https://github.com/apache/pdfbox/blob/2.0.19/pdfbox/src/main/java/org/apache/pdfbox/pdmodel/encryption/SecurityHandler.java#L381].
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org