<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>Hi,</p>
<p>Where do I look for documentation on the negotiation the SP and IdP undergo in choosing the cipher used in decrypting messages?<br />In particular I'm interested to know how Shibboleth SP 3.0.4 deals with the cipher the IdP sends it in the EncryptionMethod?</p>
<p>In an experimental client we're testing, I see the IdP is sending the <span>EncryptionMethod of "aes128-gcm". Our production Shibboleth SP 3.0.4 seems to be handling this cipher, or negotiating another one. I want to better understand how Shibboleth SP 3.0.4 is negotiating ciphers, in order to apply that technique to the experimental client.</span></p>
<p>Thank you in advance,<br />Jose</p>
</body></html>