[
https://issues.apache.org/jira/browse/CXF-6641?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14957082#comment-14957082
]
Sergey Beryozkin commented on CXF-6641:
---------------------------------------
Hi Colm, thanks for identifying it,
https://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-40#appendix-C
suggests it should be A128GCM. Only a direct ECDH encryption is tested in
JweCompactReaderWriter, but a ECDH wrap mode was ignored, hopefully it is a
right fix :-)
> JWE elliptic curve error
> ------------------------
>
> Key: CXF-6641
> URL: https://issues.apache.org/jira/browse/CXF-6641
> Project: CXF
> Issue Type: Bug
> Reporter: Colm O hEigeartaigh
>
> There's a bug I spotted in the elliptic curve encryption code in JOSE - I'm
> not sure off hand what the correct behaviour is:
> EcdhDirectKeyJweEncryption.EcdhHelper takes a "String ctAlgo" as a parameter
> that is later used as:
> ContentAlgorithm jwtAlgo = ContentAlgorithm.valueOf(ctAlgo);
> However, EcdhAesWrapKeyEncryptionAlgorithm which constructs EcdhHelper,
> passes through the key algorithm, not the content algorithm -
> keyAlgo.getJwaName() leading to an error.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
