Valid Algorithm For Mozilla NSS With XML Encryption

user2646071

I have the following setup:

JAVA 7

mozilla-nss-3.15.4-0.7.1

Sun PKCS#11 provider

XML Encryption

I am attempting to encrypt a symmetric key to send via XML Encryption.  However, I am having trouble finding an algorithm that works between PKCS11 and XML Encryption.  I am getting the exception below.  Do you have any suggestions?

Algorithm URI:

XMLCipher.AES_256;

Exception:

• org.apache.xml.security.encryption.XMLEncryptionException: No such algorithm: AES/CBC/ISO10126Padding

Original Exception was java.security.NoSuchAlgorithmException: No such algorithm: AES/CBC/ISO10126Padding

        at org.apache.xml.security.encryption.XMLCipher.constructCipher(XMLCipher.java:1562)

        at org.apache.xml.security.encryption.XMLCipher.<init>(XMLCipher.java:320)

        at org.apache.xml.security.encryption.XMLCipher.getProviderInstance(XMLCipher.java:465)

Caused by: java.security.NoSuchAlgorithmException: No such algorithm: AES/CBC/ISO10126Padding

        at javax.crypto.Cipher.getInstance(Cipher.java:673)

        at javax.crypto.Cipher.getInstance(Cipher.java:580)

        at org.apache.xml.security.encryption.XMLCipher.constructCipher(XMLCipher.java:1544)

        ... 4 more

Caused by: java.security.NoSuchAlgorithmException: Unsupported mode CBC

        at sun.security.pkcs11.P11Cipher.engineSetMode(P11Cipher.java:202)

        at javax.crypto.Cipher$Transform.setModePadding(Cipher.java:357)

        at javax.crypto.Cipher.getInstance(Cipher.java:655)

        ... 6 more

Printed Out Provider Information:

        Signature.MD2withRSA sun.security.pkcs11.P11Signature

        Cipher.DES/CBC/NoPadding sun.security.pkcs11.P11Cipher

        Cipher.AES/CBC/PKCS5Padding sun.security.pkcs11.P11Cipher

        Cipher.RSA/ECB/NoPadding sun.security.pkcs11.P11RSACipher

        Cipher.DES/CBC/PKCS5Padding sun.security.pkcs11.P11Cipher

        KeyFactory.DH sun.security.pkcs11.P11DHKeyFactory

        AlgorithmParameters.EC sun.security.ec.ECParameters

        Signature.RawDSA sun.security.pkcs11.P11Signature

        KeyGenerator.SunTlsMasterSecret sun.security.pkcs11.P11TlsMasterSecretGenerator

        Cipher.RSA/ECB/PKCS1Padding sun.security.pkcs11.P11RSACipher

        Alg.Alias.Cipher.RSA RSA/ECB/PKCS1Padding

        Alg.Alias.MessageDigest.SHA-1 SHA1

        Signature.SHA256withECDSA sun.security.pkcs11.P11Signature

        Alg.Alias.KeyAgreement.DiffieHellman DH

        Signature.SHA512withECDSA sun.security.pkcs11.P11Signature

        Alg.Alias.KeyPairGenerator.DiffieHellman DH

        KeyAgreement.DH sun.security.pkcs11.P11KeyAgreement

        Alg.Alias.Signature.ECDSA SHA1withECDSA

        Cipher.DESede/ECB/NoPadding sun.security.pkcs11.P11Cipher

        KeyAgreement.ECDH sun.security.pkcs11.P11ECDHKeyAgreement

        Provider.id className sun.security.pkcs11.SunPKCS11

        Alg.Alias.MessageDigest.SHA SHA1

        Mac.HmacSHA384 sun.security.pkcs11.P11MAC

        Cipher.AES/ECB/NoPadding sun.security.pkcs11.P11Cipher

        Mac.HmacSHA512 sun.security.pkcs11.P11MAC

        KeyFactory.DSA sun.security.pkcs11.P11DSAKeyFactory

        Mac.HmacMD5 sun.security.pkcs11.P11MAC

        Mac.SslMacMD5 sun.security.pkcs11.P11MAC

        SecretKeyFactory.ARCFOUR sun.security.pkcs11.P11SecretKeyFactory

        Mac.HmacSHA1 sun.security.pkcs11.P11MAC

        KeyGenerator.DES sun.security.pkcs11.P11KeyGenerator

        Mac.SslMacSHA1 sun.security.pkcs11.P11MAC

        Alg.Alias.Cipher.DESede DESede/ECB/PKCS5Padding

        KeyPairGenerator.EC sun.security.pkcs11.P11KeyPairGenerator

        Cipher.DESede/CBC/PKCS5Padding sun.security.pkcs11.P11Cipher

        SecretKeyFactory.DES sun.security.pkcs11.P11SecretKeyFactory

        Provider.id name SunPKCS11-NSSfips

        Cipher.DESede/CBC/NoPadding sun.security.pkcs11.P11Cipher

        Signature.SHA384withECDSA sun.security.pkcs11.P11Signature

        Cipher.AES/ECB/PKCS5Padding sun.security.pkcs11.P11Cipher

        Signature.SHA1withRSA sun.security.pkcs11.P11Signature

        KeyStore.PKCS11 sun.security.pkcs11.P11KeyStore

        KeyGenerator.AES sun.security.pkcs11.P11KeyGenerator

        Cipher.DES/ECB/PKCS5Padding sun.security.pkcs11.P11Cipher

        Cipher.ARCFOUR sun.security.pkcs11.P11Cipher

        SecretKeyFactory.DESede sun.security.pkcs11.P11SecretKeyFactory

        Alg.Alias.Signature.SHA1withDSA DSA

        Signature.MD5withRSA sun.security.pkcs11.P11Signature

        MessageDigest.SHA-384 sun.security.pkcs11.P11Digest

        SecretKeyFactory.AES sun.security.pkcs11.P11SecretKeyFactory

        Signature.SHA512withRSA sun.security.pkcs11.P11Signature

        KeyPairGenerator.RSA sun.security.pkcs11.P11KeyPairGenerator

        Cipher.AES/CBC/NoPadding sun.security.pkcs11.P11Cipher

        KeyPairGenerator.DH sun.security.pkcs11.P11KeyPairGenerator

        Alg.Alias.AlgorithmParameters.1.2.840.10045.2.1 EC

        KeyGenerator.ARCFOUR sun.security.pkcs11.P11KeyGenerator

        MessageDigest.SHA-512 sun.security.pkcs11.P11Digest

        KeyGenerator.SunTlsPrf sun.security.pkcs11.P11TlsPrfGenerator

        Provider.id version 1.7

        Alg.Alias.KeyFactory.DiffieHellman DH

        Signature.SHA1withECDSA sun.security.pkcs11.P11Signature

        Signature.SHA256withRSA sun.security.pkcs11.P11Signature

        KeyGenerator.SunTlsKeyMaterial sun.security.pkcs11.P11TlsKeyMaterialGenerator

        Alg.Alias.Cipher.DES DES/ECB/PKCS5Padding

        Alg.Alias.Signature.NONEwithDSA RawDSA

        Mac.HmacSHA256 sun.security.pkcs11.P11MAC

        Alg.Alias.KeyStore.PKCS11-NSSfips PKCS11

        Alg.Alias.Cipher.RC4 ARCFOUR

        Signature.SHA384withRSA sun.security.pkcs11.P11Signature

        Alg.Alias.KeyGenerator.RC4 ARCFOUR

        Cipher.DES/ECB/NoPadding sun.security.pkcs11.P11Cipher

        Cipher.DESede/ECB/PKCS5Padding sun.security.pkcs11.P11Cipher

        Cipher.AES/CTR/NoPadding sun.security.pkcs11.P11Cipher

        Alg.Alias.Cipher.AES AES/ECB/PKCS5Padding

        KeyGenerator.SunTlsRsaPremasterSecret sun.security.pkcs11.P11TlsRsaPremasterSecretGenerator

        SecureRandom.PKCS11 sun.security.pkcs11.P11SecureRandom

        Alg.Alias.SecretKeyFactory.RC4 ARCFOUR

        Signature.NONEwithECDSA sun.security.pkcs11.P11Signature

        KeyFactory.RSA sun.security.pkcs11.P11RSAKeyFactory

        KeyFactory.EC sun.security.pkcs11.P11DHKeyFactory

        KeyPairGenerator.DSA sun.security.pkcs11.P11KeyPairGenerator

        Provider.id info        SunPKCS11-NSSfips using library null

        MessageDigest.SHA1 sun.security.pkcs11.P11Digest

        Signature.DSA sun.security.pkcs11.P11Signature

        MessageDigest.SHA-256 sun.security.pkcs11.P11Digest

        MessageDigest.MD5 sun.security.pkcs11.P11Digest

        MessageDigest.MD2 sun.security.pkcs11.P11Digest

        KeyGenerator.DESede sun.security.pkcs11.P11KeyGenerator