Help with assertion encryption ?

[Cantor, Scott]

On 5/20/14, 5:35 AM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:

>I'm working on idp-distribution, and the encrypt assertions action
>throws an exception, with Java 7 "Cannot find any provider supporting
>AES/GCM/NoPadding" and with Java 8 "Unsupported parameter:
>javax.crypto.spec.IvParameterSpec...".

Are you sure it's that action? As Brent said, not sure why it would be
attempting that algorithm at this point unless there's a stale file
somewhere. I had very briefly listed GCM as an algorithm in a
relying-party config while I was first sketching things out, but it
shouldn't be there now.

We do use it in the DataSealer class, but I had to implement that with the
native BC API, so it's immune to Java version differences.

>I think I need to use BC, but not sure how.

I shouldn't be calling into the JCE anymore to do GCM in the DataSealer,
so it shouldn't be going through that provider API, it's just a standard
compile dependency now in java-support:

<dependency>
            <!--  Required if you're using classes from the security
package. -->
            <groupId>org.bouncycastle</groupId>
            <artifactId>bcprov-jdk15on</artifactId>
            <optional>true</optional>
        </dependency>

(Aside, I don't understand BC's weird naming conventions for their jars,
so I may not be pointing to the right dependency there.)


-- Scott