[java-xmltooling COMMIT] in /branches/REL_1: doc/RELEASE-NOTES.txt src/main/java/org/opensaml/xml/security/DefaultSec...

[noreply at shibboleth.net]

Author: putmanb
Date: Mon Oct 17 23:20:53 2011
New Revision: 740

URL: http://svn.shibboleth.net/view/java-xmltooling?rev=740&view=rev
Log:
[JXT-79]: Disable RSA v1.5 key transport in favor of RSA-OAEP for all data encryption key types

Modified:
    branches/REL_1/doc/RELEASE-NOTES.txt
    branches/REL_1/src/main/java/org/opensaml/xml/security/DefaultSecurityConfigurationBootstrap.java
    branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleDecryptionTest.java
    branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleEncryptionTest.java

Modified: branches/REL_1/doc/RELEASE-NOTES.txt
URL: http://svn.shibboleth.net/view/java-xmltooling/branches/REL_1/doc/RELEASE-NOTES.txt?rev=740&r1=739&r2=740&view=diff
==============================================================================
--- branches/REL_1/doc/RELEASE-NOTES.txt (original)
+++ branches/REL_1/doc/RELEASE-NOTES.txt Mon Oct 17 23:20:53 2011
@@ -1,6 +1,7 @@
 Changes in Release 1.3.3
 ==============================================
 [JXT-78] - XSBoolean does not extend XMLObject
+[JXT-79] - Disable RSA v1.5 key transport in favor of RSA-OAEP for all data encryption key types
 [JXT-80] - Update 3rd party runtime library dependencies
 
 Changes in Release 1.3.2

Modified: branches/REL_1/src/main/java/org/opensaml/xml/security/DefaultSecurityConfigurationBootstrap.java
URL: http://svn.shibboleth.net/view/java-xmltooling/branches/REL_1/src/main/java/org/opensaml/xml/security/DefaultSecurityConfigurationBootstrap.java?rev=740&r1=739&r2=740&view=diff
==============================================================================
--- branches/REL_1/src/main/java/org/opensaml/xml/security/DefaultSecurityConfigurationBootstrap.java (original)
+++ branches/REL_1/src/main/java/org/opensaml/xml/security/DefaultSecurityConfigurationBootstrap.java Mon Oct 17 23:20:53 2011
@@ -96,7 +96,7 @@
         
         // Asymmetric key transport algorithms
         config.registerKeyTransportEncryptionAlgorithmURI("RSA", null, "AES", EncryptionConstants.ALGO_ID_KEYTRANSPORT_RSAOAEP);
-        config.registerKeyTransportEncryptionAlgorithmURI("RSA", null, "DESede", EncryptionConstants.ALGO_ID_KEYTRANSPORT_RSA15);
+        config.registerKeyTransportEncryptionAlgorithmURI("RSA", null, "DESede", EncryptionConstants.ALGO_ID_KEYTRANSPORT_RSAOAEP);
         
         // Symmetric key wrap algorithms
         config.registerKeyTransportEncryptionAlgorithmURI("AES", 128, null, EncryptionConstants.ALGO_ID_KEYWRAP_AES128);

Modified: branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleDecryptionTest.java
URL: http://svn.shibboleth.net/view/java-xmltooling/branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleDecryptionTest.java?rev=740&r1=739&r2=740&view=diff
==============================================================================
--- branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleDecryptionTest.java (original)
+++ branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleDecryptionTest.java Mon Oct 17 23:20:53 2011
@@ -65,7 +65,7 @@
         super();
         
         encURI = EncryptionConstants.ALGO_ID_BLOCKCIPHER_AES128;
-        kekURI = EncryptionConstants.ALGO_ID_KEYTRANSPORT_RSA15;
+        kekURI = EncryptionConstants.ALGO_ID_KEYTRANSPORT_RSAOAEP;
         
         targetFile = "/data/org/opensaml/xml/encryption/SimpleDecryptionTest.xml";
     }

Modified: branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleEncryptionTest.java
URL: http://svn.shibboleth.net/view/java-xmltooling/branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleEncryptionTest.java?rev=740&r1=739&r2=740&view=diff
==============================================================================
--- branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleEncryptionTest.java (original)
+++ branches/REL_1/src/test/java/org/opensaml/xml/encryption/SimpleEncryptionTest.java Mon Oct 17 23:20:53 2011
@@ -80,7 +80,7 @@
         targetFile = "/data/org/opensaml/xml/encryption/SimpleEncryptionTest.xml";
         
         algoURI = EncryptionConstants.ALGO_ID_BLOCKCIPHER_AES128;
-        kekURIRSA = EncryptionConstants.ALGO_ID_KEYTRANSPORT_RSA15;
+        kekURIRSA = EncryptionConstants.ALGO_ID_KEYTRANSPORT_RSAOAEP;
         kekURIAES = EncryptionConstants.ALGO_ID_KEYWRAP_AES128;
     }