[ 
https://issues.apache.org/jira/browse/WSS-306?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sergey Zhemzhitsky updated WSS-306:
-----------------------------------

    Description: 
WSS4J generates secret key itself instead of using 
http://download.oracle.com/javase/6/docs/api/javax/crypto/KeyGenerator.html#generateKey%28%29

    protected byte[] generateEphemeralKey() throws WSSecurityException {
        try {
            return WSSecurityUtil.generateNonce(this.keySize / 8);
        } catch (Exception e) {
            throw new WSSecurityException("Error in creating the ephemeral 
key", e);
        }
    }


  was:
WSS4J generates secret key itself instead of using 
http://download.oracle.com/javase/6/docs/api/javax/crypto/KeyGenerator.html#generateKey%28%29
{code}
    protected byte[] generateEphemeralKey() throws WSSecurityException {
        try {
            return WSSecurityUtil.generateNonce(this.keySize / 8);
        } catch (Exception e) {
            throw new WSSecurityException("Error in creating the ephemeral 
key", e);
        }
    }
{code}


> It would be nice to have WSSecEncryptedKey generate secret keys by means of 
> KeyGenerator
> ----------------------------------------------------------------------------------------
>
>                 Key: WSS-306
>                 URL: https://issues.apache.org/jira/browse/WSS-306
>             Project: WSS4J
>          Issue Type: Bug
>          Components: WSS4J Core
>    Affects Versions: 1.6.1
>            Reporter: Sergey Zhemzhitsky
>            Assignee: Colm O hEigeartaigh
>
> WSS4J generates secret key itself instead of using 
> http://download.oracle.com/javase/6/docs/api/javax/crypto/KeyGenerator.html#generateKey%28%29
>     protected byte[] generateEphemeralKey() throws WSSecurityException {
>         try {
>             return WSSecurityUtil.generateNonce(this.keySize / 8);
>         } catch (Exception e) {
>             throw new WSSecurityException("Error in creating the ephemeral 
> key", e);
>         }
>     }

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to