Help with assertion encryption ?

[Brent Putman]

On 5/20/14 6:06 PM, Cantor, Scott wrote:
> On 5/20/14, 8:52 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>> When I get into the office, I'll test where I have a Java 8 environment,
>> but I suspect it will show that Java 8's AES GCM support requires an IV
>> of 128 bits.  I don't know off-hand what the correct IV size(s) for AES
>> GCM are, have to go do some reading.  Maybe Scott or Ian knows.
> For XML Encryption, it's 96.

Ok, thanks.

Turns out my hypothesis was wrong.  I can't get it to work in Java 8
with any IV size.  So I think it's some more fundamental issue.  Maybe
the Java 8 AES GCM impl simply doesn't work for this use case (yet). 
Maybe you can't init it with an IvParameterSpec, perhaps it requires
something different.  I'll continue looking into it.

In any case, what Santuario does seems fundamentally at odds with what
Java 8 expects, if it works at all.