[WSS-399] WSS4J: cannot set DigestMethod for KEYTRANSPORT_RSAOEP though requested by W3C

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.7
• Fix Version/s: 1.6.8
• Component/s: WSS4J Core
• Environment: any
• Assignee: Colm O hEigeartaigh
• Reporter: Stefan
• Created: 08/Aug/12 16:22
• Updated: 04/Dec/12 12:16
• Resolved: 13/Aug/12 10:01

Description

As stated on http://www.w3.org/TR/xmlenc-core/#sec-RSA-OAEP (and http://java.net/projects/metro/lists/users/archive/2008-05/message/12) there should be the possibility to set the message digest that is listed as MANDATORY (and shall be set in the generated output).

QUOTE:
5.4.2 RSA-OAEP

Identifier:
http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p (REQUIRED)

The RSAES-OAEP-ENCRYPT algorithm, as specified in RFC 2437 [PKCS1], takes three parameters. The two user specified parameters are a MANDATORY message digest function and an OPTIONAL encoding octet string OAEPparams. The message digest function is indicated by the Algorithm attribute of a child ds:DigestMethod element and the mask generation function, the third parameter, is always MGF1 with SHA1 (mgf1SHA1Identifier). Both the message digest and mask generation functions are used in the EME-OAEP-ENCODE operation as part of RSAES-OAEP-ENCRYPT. The encoding octet string is the base64 decoding of the content of an optional OAEPparams child element . If no OAEPparams child is provided, a null string is used.