[WSS-575] Support for Digest other than sha1 in xenc:EncryptionMethod

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.3
• Fix Version/s: 2.0.8, 2.1.6
• Component/s: WSS4J Core
• Labels: security
• Assignee: Colm O hEigeartaigh
• Reporter: Stefan Müller
• Created: 04/Apr/16 08:57
• Updated: 23/Jun/16 15:49
• Resolved: 05/Apr/16 10:06

Description

To support a specific security profile we need to be able to set the DigestMethod to sha256. We already have a custom algorithmsuite implementing org.apache.wss4j.policy.model.AlgorithmSuite supporting everyhting but the ds:DigestMethod:

<xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep">
<xenc11:MGF xmlns:xenc11="http://www.w3.org/2009/xmlenc11#" Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha256"/>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
</xenc:EncryptionMethod>