Uploaded image for project: 'CXF'
  1. CXF
  2. CXF-8402

JwkUtils::fromECPublicKey returns key coordinates without leading zero

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 3.4.3
    • None
    • None
    • Unknown

    Description

      Hi!

      JwkUtils::fromECPublicKey returns key coordinates without leading zeroes because it's using BigInteger.toByteArray(), which returns only necessary bytes to encode a big integer value, here: https://github.com/apache/cxf/blob/master/rt/rs/security/jose-parent/jose/src/main/java/org/apache/cxf/rs/security/jose/jwk/JwkUtils.java#L378

      This causes issues in different libraries, almost everywhere leading zeroes are expected to be present so that coordinate length is not changed depending on data.

      Attachments

        1. cert.pem
          0.5 kB
          Dimitri Witkowski
        2. generate.sh
          0.3 kB
          Dimitri Witkowski
        3. image-2021-01-07-09-35-19-811.png
          54 kB
          Dimitri Witkowski
        4. Main.java
          0.8 kB
          Dimitri Witkowski

        Issue Links

          Activity

            People

              coheigea Colm O hEigeartaigh
              antelle Dimitri Witkowski
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: