Shibboleth Service Provider with RSA-PSS

[Cantor, Scott]

On 5/12/22, 5:04 AM, "users on behalf of Dennis Nikolay" <users-bounces at shibboleth.net on behalf of d.nikolay at wikom.de> wrote:

> It does not seem like Shibboleth Service Provider supports this or am I missing something?

No, but I will be fascinated to learn what does. Unlike RSA-OAEP, AES-CBC is actually  broken and yet we are virtually the only implementation supporting AES-GCM.

-- Scott