[JIRA] Updated: (JXT-8) Decryption of EncryptedData that contains something other than a single DOM Element

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/JXT-8?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor updated JXT-8:
---------------------------

    Fix Version/s:     (was: 1.4.0)

Verified that it's still unsupported. I think we could certainly implement this quickly if we required the encrypted XML be well-formed.

The C++ version of this code does a lot of additional tree walking to pick up xmlns declarations to add to the fake root to avoid that restriction. That might be nice, but without a use case, I think we can defer it.

> Decryption of EncryptedData that contains something other than a single DOM Element
> -----------------------------------------------------------------------------------
>
>                 Key: JXT-8
>                 URL: https://issues.shibboleth.net/jira/browse/JXT-8
>             Project: XMLTooling - Java
>          Issue Type: Improvement
>          Components: Encryption
>            Reporter: Brent Putman
>            Assignee: Brent Putman
>            Priority: Minor
>
> Apache XML Security currently only provides a "detached" XMLCipher decryption method that returns a byte[]. The Decrypter must handle parsing this into a DocumentFragment. Currently we only handle parsing this if it is a proper XML document instance that can be parsed with a DocumentBuilder from our ParserPool.
> One possible option is to use DOM Level 3 LSParser#parseWithContext. There is (commented out) code in the Decrypter to do this. Unfortunately the current Xerces implementation of LSParser does not yet support this method.
> Some possible options are:
> 1) wait on Xerces support in LSParser
> 2) request an enhancement to Apache XML Security for an XMLCipher method which returns a DocumentFragment. The C++ version of XML Security does already do this.
> 3) implement our own method of parsing and returning a fragment by, for example, wraping the returned byte[] data in a dummy element (opening and closing tags) so can be parsed by a DocumentBuilder. There may be thorny issues here with encoding, character sets, etc. The Apache C++ library apparently does something similar.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira