XMLSecurity exception while decrypting: Errors occurred during de-serialisation

Peter Schober peter.schober at univie.ac.at
Thu Feb 19 14:34:32 UTC 2026


Scott Cantor via users <users at shibboleth.net> [2026-02-19 14:50 CET]:
> That is where the exception is raised. The decrypted data is being
> handled as UTF-16 and then turned into UTF-8 for parsing by Xerces
> using a parser instance Santuario creates internally.
> It's one of the places we have the least control over anything that
> goes on and none of it was originally any code I wrote.

Of course it happens *there*. ;)

> I would probably start by turning off encryption and just see what
> gets passed over in plaintext, and if that doesn't help I would be
> looking at reproducing it with a dummy key that could be packaged up
> with a sample so it could be run through other decryption
> implementations.

Thanks! (To Rod as well.) I've meanwhile learned that the (singular)
IDP admin is away until next week so we'll pick this up later.

-peter


More information about the users mailing list