[JIRA] Closed: (JXT-79) Disable RSA v1.5 key transport in favor of RSA-OAEP for all data encryption key types

[Brent Putman (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/JXT-79?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brent Putman closed JXT-79.
---------------------------

    Resolution: Completed

Fixed in r740.

> Disable RSA v1.5 key transport in favor of RSA-OAEP for all data encryption key types
> -------------------------------------------------------------------------------------
>
>                 Key: JXT-79
>                 URL: https://issues.shibboleth.net/jira/browse/JXT-79
>             Project: XMLTooling - Java
>          Issue Type: Task
>      Security Level: Standard(Standard bug, may impact functionality but does not represent a security vulnerability ) 
>          Components: Security
>    Affects Versions: 1.3.2
>            Reporter: Brent Putman
>            Assignee: Brent Putman
>            Priority: Minor
>             Fix For: 1.3.3
>
>   Original Estimate: 5 minutes
>  Remaining Estimate: 5 minutes
>
> Research suggests RSA v1.5 is vulnerable to attacks, suggested fix is to switch to using RSA-OAEP for all key transport.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira