rootvector2 opened a new pull request, #3689: URL: https://github.com/apache/cxf/pull/3689
`XmlEncOutInterceptor` and `XmlSecOutInterceptor` default to `aes256-cbc` while `AbstractXmlEncInHandler` and `XmlSecInInterceptor` accept any content algorithm, and the DOM handler answers bad padding with "Payload can not be decrypted" but bad plaintext with "Payload document can not be created", which is the XML Encryption CBC padding oracle (found reviewing the decrypt path: replaying a captured request with each value of the last IV byte split 256 responses 240/16 and recovered that plaintext byte), so this accepts only AES-GCM unless `encryptionSymmetricKeyAlgo` is configured, defaults both out interceptors to `aes256-gcm` as FIPS mode already does, and returns one error for both failures, matching #3434 for SAML SSO. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
