Error decrypting assertion

Mon Sep 6 14:25:30 UTC 2021

Hello everyone,

I was experimenting with a project using OpenSAML V3 and I was able to
successfully read assertions and their attributes. However, when I try
to using Decrypter to decrypt an encrypted assertion I can an error
(see below stack trace). Does anyone know what the root cause of this
issue might be?

[main] INFO org.opensaml.xmlsec.algorithm.AlgorithmSupport - Mapping
from algorithm URI http://www.w3.org/2001/04/xmlenc#rsa-1_5 to key
length not available
[main] ERROR net.shibboleth.utilities.java.support.xml.BasicParserPool
- XML Parsing Error
[main] ERROR org.opensaml.xmlsec.encryption.support.Decrypter - Error
parsing decrypted input stream
net.shibboleth.utilities.java.support.xml.XMLParserException: Unable to
parse inputstream, it contained invalid XML
 at
net.shibboleth.utilities.java.support.xml.BasicParserPool.parse(BasicPa
rserPool.java:253)
 at
org.opensaml.xmlsec.encryption.support.Decrypter.parseInputStream(Decry
pter.java:811)
 at
org.opensaml.xmlsec.encryption.support.Decrypter.decryptDataToDOM(Decry
pter.java:613)
 at
org.opensaml.xmlsec.encryption.support.Decrypter.decryptUsingResolvedEn
cryptedKey(Decrypter.java:782)
 at
org.opensaml.xmlsec.encryption.support.Decrypter.decryptDataToDOM(Decry
pter.java:537)
 at
org.opensaml.xmlsec.encryption.support.Decrypter.decryptDataToList(Decr
ypter.java:450)
 at
org.opensaml.xmlsec.encryption.support.Decrypter.decryptData(Decrypter.
java:410)
 at
org.opensaml.saml.saml2.encryption.Decrypter.decryptData(Decrypter.java
:176)
 at
org.opensaml.saml.saml2.encryption.Decrypter.decrypt(Decrypter.java:104
)
 at
com.netvariant.opensaml.App.getSamlResponseAttributes(App.java:196)
 at com.netvariant.opensaml.App.main(App.java:206)
Caused by: org.xml.sax.SAXParseException; lineNumber: 1; columnNumber:
214; The prefix "saml" for element "saml:Assertion" is not bound.
 at
java.xml/com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.cr
eateSAXParseException(ErrorHandlerWrapper.java:204)
 at
java.xml/com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fa
talError(ErrorHandlerWrapper.java:178)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.repor
tError(XMLErrorReporter.java:400)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.repor
tError(XMLErrorReporter.java:327)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.repor
tError(XMLErrorReporter.java:284)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerIm
pl.scanStartElement(XMLNSDocumentScannerImpl.java:284)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerIm
pl$NSContentDriver.scanRootElementHook(XMLNSDocumentScannerImpl.java:61
3)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentSca
nnerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java
:3063)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl
$PrologDriver.next(XMLDocumentScannerImpl.java:836)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl
.next(XMLDocumentScannerImpl.java:605)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerIm
pl.next(XMLNSDocumentScannerImpl.java:112)
 at
java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentSca
nnerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
 at
java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.
parse(XML11Configuration.java:888)
 at
java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.
parse(XML11Configuration.java:824)
 at
java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XML
Parser.java:141)
 at
java.xml/com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOM
Parser.java:246)
 at
java.xml/com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.pa
rse(DocumentBuilderImpl.java:339)
 at
java.xml/javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:1
22)
 at
net.shibboleth.utilities.java.support.xml.BasicParserPool$DocumentBuild
erProxy.parse(BasicParserPool.java:785)
 at
net.shibboleth.utilities.java.support.xml.BasicParserPool.parse(BasicPa
rserPool.java:247)
 ... 10 more

The response I'm trying to process is:

<samlp:Response
 xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
 xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0"
IssueInstant="2014-07-17T01:01:48Z"
Destination="http://sp.example.com/demo1/index.php?acs"
InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
 <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
 <samlp:Status>
 <samlp:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
 </samlp:Status>
 <saml:EncryptedAssertion>
 <xenc:EncryptedData
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
 xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"
 xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"
Type="http://www.w3.org/2001/04/xmlenc#Element">
 <xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
 <dsig:KeyInfo
xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
 <xenc:EncryptedKey>
 <xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>
 <xenc:CipherData>
<xenc:CipherValue>rxfCVYnDOWMZmuQiYsIWL66RH8sDf8XQmoiR2k7TDhphcmtcG6/0c
JzjwSViIJLCK9Z+4SV1LJmHGfYheSDQsuVLgCLyZguJ1XWXVQjztX/ENvYz8H+Bl/yyZucw
ObpEMIusimBYlHSd74qTT96N5/v1t6l9YNOHzBD1+nSjRb1txp+hzI2fID9P9taETM26EHi
x8t8EVG/HD3mcYi0Z+OlhqPL+cFan4R4z2GRHhtwxPjWzJvaWLFe3qGIsYoEQWmpgkpBdbU
itg23S+SA2hj4iShZSqSpheQL2bL7N2exW6qnQvXZc35TcuL3vBE179cpQHbzXN5nSc/sff
bom4g== </xenc:CipherValue>
 </xenc:CipherData>
 </xenc:EncryptedKey>
 </dsig:KeyInfo>
 <xenc:CipherData>
<xenc:CipherValue>L1PQR8vKC4AlsA5gDuXQ06FhvaIURVZLnoOJ6BQ0jw7TXjnklimVd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</xenc:CipherValue>
 </xenc:CipherData>
 </xenc:EncryptedData>
 </saml:EncryptedAssertion>
</samlp:Response>

-- 
Regards,
Ayman Abi Abdallah
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20210906/de90cd4c/attachment-0001.htm>