[JIRA] (JOIDCRP-17) Add JWT Encryption Parameter Resolver Support

[Brent Putman (Jira)]

Brent Putman ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A97de0981-adc3-4044-95ed-131622fad81e ) *commented* on JOIDCRP-17 ( https://shibboleth.atlassian.net/browse/JOIDCRP-17?atlOrigin=eyJpIjoiMzRiZjlhMzFlNGVmNGIxMjkzMWFkMjhkNjE4NDU5ZjYiLCJwIjoiaiJ9 )

Re: Add JWT Encryption Parameter Resolver Support ( https://shibboleth.atlassian.net/browse/JOIDCRP-17?atlOrigin=eyJpIjoiMzRiZjlhMzFlNGVmNGIxMjkzMWFkMjhkNjE4NDU5ZjYiLCJwIjoiaiJ9 )

Based on your comments in the call notes today, was looking at the issue you mentioned with testing ECDH.

I think you have a conceptual error in the JWA algo descriptor there: KeyAgreementECDHES. It's correctly specified as being a sub-type of KeyAgreement , but it’s got some extraneous extra stuff on it for padding, cipher mode, etc. Maybe a copy/paste from the RSA example, etc?

Those aren’t relevant because this is not an encryption cipher, it’s key agreement. Take a look at the corresponding XML Encryption one and you’ll see what I mean:  {{ org.opensaml.xmlsec.algorithm.descriptors.KeyAgreementECDH  }} 

So that means the JCAAlgorithmID should just be “ECDH”. Under the covers, that’s handed to the JCA Security KeyAgreement class, not Cipher like RSA is.

Let me know if that doesn’t make sense.

( https://shibboleth.atlassian.net/browse/JOIDCRP-17#add-comment?atlOrigin=eyJpIjoiMzRiZjlhMzFlNGVmNGIxMjkzMWFkMjhkNjE4NDU5ZjYiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDCRP-17#add-comment?atlOrigin=eyJpIjoiMzRiZjlhMzFlNGVmNGIxMjkzMWFkMjhkNjE4NDU5ZjYiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100204- sha1:d476756 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220805/32059269/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-ebb53a2a-d710-41f2-bcc5-e613ee7a36b0
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220805/32059269/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-e234e7de-4112-4e0d-9fc7-c93cbeb44906
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220805/32059269/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-ff3de305-0917-44b3-8344-c460f02f361c
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220805/32059269/attachment-0005.png>