ComponentSpace

Forums



Support for http://www.w3.org/2009/xmlenc11#aes128-gcm


Support for http://www.w3.org/2009/xmlenc11#aes128-gcm

Author
Message
oteinonen
oteinonen
New Member
New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)

Group: Forum Members
Posts: 2, Visits: 8
Hello Support,

we just upgraded to the latest version to get AES256-GCM support. Now one of our customers wants to use an idp that uses http://www.w3.org/2009/xmlenc11#aes128-gcm exclusively. Is there any way to add support for this algorithm?
ComponentSpace
ComponentSpace
ComponentSpace Development
ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)

Group: Administrators
Posts: 2.8K, Visits: 8.8K
AES-GCM support is available through an extension to our product. It requires the use of BouncyCastle as AES-GCM support currently isn't included in the .NET framework.

Please take a look at the project under the Extensions\AesGcmEncryption folder. I've included the readme.txt contents below for your convenience.

Overview
========

Adds support for the following data encryption algorithms:

http://www.w3.org/2009/xmlenc11#aes128-gcm
http://www.w3.org/2009/xmlenc11#aes192-gcm
http://www.w3.org/2009/xmlenc11#aes256-gcm

The Bouncy Castle (https://www.bouncycastle.org/csharp/index.html) AES-GCM implementation is used as this support
currently isn't available in the .NET framework (https://github.com/dotnet/runtime/issues/34784).

Building
======

Build the AesGcmExtension project.

Registering
=========

Add the ComponentSpace.AesGcmExtension.dll and BouncyCastle.Crypto.dll to the application.

Alternatively, copy the AesGcmXmlEncryptionExtension.cs directly into the application's project.

Register the algorithms at application start-up as follows:

using ComponentSpace.AesGcmExtension;
using ComponentSpace.SAML2.Utility;

XmlEncryptionExtensions.DataEncryptionExtensions["http://www.w3.org/2009/xmlenc11#aes128-gcm"] = new AesGcmXmlEncryptionExtension();
XmlEncryptionExtensions.DataEncryptionExtensions["http://www.w3.org/2009/xmlenc11#aes192-gcm"] = new AesGcmXmlEncryptionExtension();
XmlEncryptionExtensions.DataEncryptionExtensions["http://www.w3.org/2009/xmlenc11#aes256-gcm"] = new AesGcmXmlEncryptionExtension();



Regards
ComponentSpace Development
oteinonen
oteinonen
New Member
New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)New Member (3 reputation)

Group: Forum Members
Posts: 2, Visits: 8
Hello,

thank you for pointing me in the right direction. The solution seems to work as expected.

FYI, the API for the latest libraries seems to be XmlEncryptionExtensions.DataEncryptionExtensions instead of XmlEncryptionExtensions.DataDecryptionMethods
ComponentSpace
ComponentSpace
ComponentSpace Development
ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)ComponentSpace Development (3.9K reputation)

Group: Administrators
Posts: 2.8K, Visits: 8.8K
Thanks for pointing that out. I'll see that our documentation is updated accordingly.

Regards
ComponentSpace Development
GO


Similar Topics


Execution: 0.000. 2 queries. Compression Enabled.
Login
Existing Account
Email Address:


Password:


Social Logins

Select a Forum....









Forums, Documentation & Knowledge Base - ComponentSpace


Search