<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Adding the system property did get past me this hump<br>
</p>
<p>-Dorg.apache.xml.security.cipher.gcm.useIvParameterSpec=true<br>
</p>
<p><br>
</p>
<p>Thank you guys so much! Time to march on until I hit my next wall =)<br>
</p>
<p><br>
</p>
<div id="Signature">
<div class="BodyFragment"><font size="2">
<div class="PlainText">Eric Ochlak<br>
</div>
</font></div>
</div>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Brent Putman <putmanb@georgetown.edu><br>
<b>Sent:</b> Wednesday, July 6, 2016 6:55 PM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Re: Encryption Error</font>
<div> </div>
</div>
<div>
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 7/6/16 6:27 PM, Brent Putman wrote:<br>
</div>
<blockquote type="cite">
<p><br>
</p>
<br>
<blockquote type="cite">
<pre>In fact, GCM didn't even work properly with Java 7's JCE, that I recall.</pre>
</blockquote>
<br>
I'm not sure, I can't keep them straight.</blockquote>
<br>
Luckily I still had my sandbox class sitting around where I can test this empirically...<br>
<br>
<blockquote type="cite">It might not with Oracle's default security provider set (although I could be wrong),</blockquote>
<br>
I wasn't wrong. The SunJCE provider on Oracle (MacOS) JDK 1.7.0_79 doesn't support AES GCM, period.<br>
<br>
<br>
<blockquote type="cite">but pretty sure it does with BC configured.<br>
<br>
</blockquote>
<br>
JDK 7 does however work for AES GCM with BC installed as a security provider.<br>
<br>
And for the record, Oracle (MacOS) JDK 8 does support it out-of-the-box in their provider set.<br>
</div>
</div>
</body>
</html>