[WSS-566] AES_128_GCM does not work for attachments

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0.1
• Fix Version/s: 2.0.7, 2.1.5
• Component/s: WSS4J Core
• Assignee: Colm O hEigeartaigh
• Reporter: Namrata Jaiswal
• Created: 02/Feb/16 09:43
• Updated: 29/Mar/16 09:55
• Resolved: 02/Feb/16 11:13

Description

When trying use stax APIs to encrypt and decrypt attachments using AES_GCM_128, it breaks with error saying
Caused by: java.lang.IllegalStateException: Cipher not initialized
at javax.crypto.Cipher.d(Unknown Source)
at javax.crypto.Cipher.doFinal(Unknown Source)
at javax.crypto.CipherInputStream.close(Unknown Source)

Please note that same code works for AES_128 with attachments.

Also, I looked into the code stax code, found that org.apache.xml.security.stax.impl.processor.input.AbstractDecryptInputProcessor.processEvent(InputProcessorChain, boolean) has

final int ivLength = JCEAlgorithmMapper.getIVLengthFromURI(algorithmURI) / 8;

Not sure if ivLength used for GCM could be the problem?