[CXF-8231] JAX-RS JOSE can't decrypt ECDHAESKeywrap

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.5
• Fix Version/s: 3.3.6
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: chen
• Created: 05/Mar/20 10:38
• Updated: 22/Dec/21 20:43
• Resolved: 05/Mar/20 14:50

Description

3.3.5 JOSE supports ECDH-ES+A128KW, ECDH-ES+A192KW, **ECDH-ES+A256KW

org.apache.cxf.rs.security.jose.jwe.EcdhAesWrapKeyDecryptionAlgorithm only supports ECDH-ES+A128KW.

so when using JweUtils to decrypt "**ECDH-ES+A256KW", it show "INVALID_KEY_ALGORITHM"