[CAMEL-12857] Enhance the AS2 Component to support RSA-OAEP

• Type: New Feature
• Status: Resolved
• Priority: Minor
• Resolution: Abandoned
• Affects Version/s: 2.22.1
• Component/s: camel-as2
• Estimated Complexity: Unknown
• Assignee: Unassigned
• Reporter: Martin Hoffmann
• Created: 04/Oct/18 14:06
• Updated: 02/Sep/22 11:15
• Resolved: 02/Sep/22 11:15

Description

The use of AS2 in Germany for business application could require to follow regulations set by the BSI (German Federal Office for Information Security).

The BSI requeries to use OAEP (Optimal asymmetric encryption padding) when sending encrypted SMIME-messages between public institutions. As AS2 uses SMIME as message structur this regulation affects AS2 implementation used in Germany.

https://en.wikipedia.org/wiki/Optimal_asymmetric_encryption_padding

The BouncyCastle libary already supports OAEP.

See https://www.bouncycastle.org/specifications.html

• RSA/NONE/OAEPWithMD5AndMGF1Padding
• RSA/NONE/OAEPWithSHA1AndMGF1Padding
• RSA/NONE/OAEPWithSHA224AndMGF1Padding
• RSA/NONE/OAEPWithSHA256AndMGF1Padding
• RSA/NONE/OAEPWithSHA384AndMGF1Padding
• RSA/NONE/OAEPWithSHA512AndMGF1Padding
• RSA/NONE/OAEPWithSHA3-224AndMGF1Padding
• RSA/NONE/OAEPWithSHA3-256AndMGF1Padding
• RSA/NONE/OAEPWithSHA3-384AndMGF1Padding
• RSA/NONE/OAEPWithSHA3-512AndMGF1Padding