Skip to Main Content

Java Security

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Valid Algorithm For Mozilla NSS With XML Encryption

user2646071Apr 27 2014

I have the following setup:

JAVA 7

mozilla-nss-3.15.4-0.7.1

Sun PKCS#11 provider

XML Encryption

I am attempting to encrypt a symmetric key to send via XML Encryption.  However, I am having trouble finding an algorithm that works between PKCS11 and XML Encryption.  I am getting the exception below.  Do you have any suggestions?

Algorithm URI:

XMLCipher.AES_256;

Exception:

  • org.apache.xml.security.encryption.XMLEncryptionException: No such algorithm: AES/CBC/ISO10126Padding

Original Exception was java.security.NoSuchAlgorithmException: No such algorithm: AES/CBC/ISO10126Padding

        at org.apache.xml.security.encryption.XMLCipher.constructCipher(XMLCipher.java:1562)

        at org.apache.xml.security.encryption.XMLCipher.<init>(XMLCipher.java:320)

        at org.apache.xml.security.encryption.XMLCipher.getProviderInstance(XMLCipher.java:465)

Caused by: java.security.NoSuchAlgorithmException: No such algorithm: AES/CBC/ISO10126Padding

        at javax.crypto.Cipher.getInstance(Cipher.java:673)

        at javax.crypto.Cipher.getInstance(Cipher.java:580)

        at org.apache.xml.security.encryption.XMLCipher.constructCipher(XMLCipher.java:1544)

        ... 4 more

Caused by: java.security.NoSuchAlgorithmException: Unsupported mode CBC

        at sun.security.pkcs11.P11Cipher.engineSetMode(P11Cipher.java:202)

        at javax.crypto.Cipher$Transform.setModePadding(Cipher.java:357)

        at javax.crypto.Cipher.getInstance(Cipher.java:655)

        ... 6 more

Printed Out Provider Information:

        Signature.MD2withRSA sun.security.pkcs11.P11Signature

        Cipher.DES/CBC/NoPadding sun.security.pkcs11.P11Cipher

        Cipher.AES/CBC/PKCS5Padding sun.security.pkcs11.P11Cipher

        Cipher.RSA/ECB/NoPadding sun.security.pkcs11.P11RSACipher

        Cipher.DES/CBC/PKCS5Padding sun.security.pkcs11.P11Cipher

        KeyFactory.DH sun.security.pkcs11.P11DHKeyFactory

        AlgorithmParameters.EC sun.security.ec.ECParameters

        Signature.RawDSA sun.security.pkcs11.P11Signature

        KeyGenerator.SunTlsMasterSecret sun.security.pkcs11.P11TlsMasterSecretGenerator

        Cipher.RSA/ECB/PKCS1Padding sun.security.pkcs11.P11RSACipher

        Alg.Alias.Cipher.RSA RSA/ECB/PKCS1Padding

        Alg.Alias.MessageDigest.SHA-1 SHA1

        Signature.SHA256withECDSA sun.security.pkcs11.P11Signature

        Alg.Alias.KeyAgreement.DiffieHellman DH

        Signature.SHA512withECDSA sun.security.pkcs11.P11Signature

        Alg.Alias.KeyPairGenerator.DiffieHellman DH

        KeyAgreement.DH sun.security.pkcs11.P11KeyAgreement

        Alg.Alias.Signature.ECDSA SHA1withECDSA

        Cipher.DESede/ECB/NoPadding sun.security.pkcs11.P11Cipher

        KeyAgreement.ECDH sun.security.pkcs11.P11ECDHKeyAgreement

        Provider.id className sun.security.pkcs11.SunPKCS11

        Alg.Alias.MessageDigest.SHA SHA1

        Mac.HmacSHA384 sun.security.pkcs11.P11MAC

        Cipher.AES/ECB/NoPadding sun.security.pkcs11.P11Cipher

        Mac.HmacSHA512 sun.security.pkcs11.P11MAC

        KeyFactory.DSA sun.security.pkcs11.P11DSAKeyFactory

        Mac.HmacMD5 sun.security.pkcs11.P11MAC

        Mac.SslMacMD5 sun.security.pkcs11.P11MAC

        SecretKeyFactory.ARCFOUR sun.security.pkcs11.P11SecretKeyFactory

        Mac.HmacSHA1 sun.security.pkcs11.P11MAC

        KeyGenerator.DES sun.security.pkcs11.P11KeyGenerator

        Mac.SslMacSHA1 sun.security.pkcs11.P11MAC

        Alg.Alias.Cipher.DESede DESede/ECB/PKCS5Padding

        KeyPairGenerator.EC sun.security.pkcs11.P11KeyPairGenerator

        Cipher.DESede/CBC/PKCS5Padding sun.security.pkcs11.P11Cipher

        SecretKeyFactory.DES sun.security.pkcs11.P11SecretKeyFactory

        Provider.id name SunPKCS11-NSSfips

        Cipher.DESede/CBC/NoPadding sun.security.pkcs11.P11Cipher

        Signature.SHA384withECDSA sun.security.pkcs11.P11Signature

        Cipher.AES/ECB/PKCS5Padding sun.security.pkcs11.P11Cipher

        Signature.SHA1withRSA sun.security.pkcs11.P11Signature

        KeyStore.PKCS11 sun.security.pkcs11.P11KeyStore

        KeyGenerator.AES sun.security.pkcs11.P11KeyGenerator

        Cipher.DES/ECB/PKCS5Padding sun.security.pkcs11.P11Cipher

        Cipher.ARCFOUR sun.security.pkcs11.P11Cipher

        SecretKeyFactory.DESede sun.security.pkcs11.P11SecretKeyFactory

        Alg.Alias.Signature.SHA1withDSA DSA

        Signature.MD5withRSA sun.security.pkcs11.P11Signature

        MessageDigest.SHA-384 sun.security.pkcs11.P11Digest

        SecretKeyFactory.AES sun.security.pkcs11.P11SecretKeyFactory

        Signature.SHA512withRSA sun.security.pkcs11.P11Signature

        KeyPairGenerator.RSA sun.security.pkcs11.P11KeyPairGenerator

        Cipher.AES/CBC/NoPadding sun.security.pkcs11.P11Cipher

        KeyPairGenerator.DH sun.security.pkcs11.P11KeyPairGenerator

        Alg.Alias.AlgorithmParameters.1.2.840.10045.2.1 EC

        KeyGenerator.ARCFOUR sun.security.pkcs11.P11KeyGenerator

        MessageDigest.SHA-512 sun.security.pkcs11.P11Digest

        KeyGenerator.SunTlsPrf sun.security.pkcs11.P11TlsPrfGenerator

        Provider.id version 1.7

        Alg.Alias.KeyFactory.DiffieHellman DH

        Signature.SHA1withECDSA sun.security.pkcs11.P11Signature

        Signature.SHA256withRSA sun.security.pkcs11.P11Signature

        KeyGenerator.SunTlsKeyMaterial sun.security.pkcs11.P11TlsKeyMaterialGenerator

        Alg.Alias.Cipher.DES DES/ECB/PKCS5Padding

        Alg.Alias.Signature.NONEwithDSA RawDSA

        Mac.HmacSHA256 sun.security.pkcs11.P11MAC

        Alg.Alias.KeyStore.PKCS11-NSSfips PKCS11

        Alg.Alias.Cipher.RC4 ARCFOUR

        Signature.SHA384withRSA sun.security.pkcs11.P11Signature

        Alg.Alias.KeyGenerator.RC4 ARCFOUR

        Cipher.DES/ECB/NoPadding sun.security.pkcs11.P11Cipher

        Cipher.DESede/ECB/PKCS5Padding sun.security.pkcs11.P11Cipher

        Cipher.AES/CTR/NoPadding sun.security.pkcs11.P11Cipher

        Alg.Alias.Cipher.AES AES/ECB/PKCS5Padding

        KeyGenerator.SunTlsRsaPremasterSecret sun.security.pkcs11.P11TlsRsaPremasterSecretGenerator

        SecureRandom.PKCS11 sun.security.pkcs11.P11SecureRandom

        Alg.Alias.SecretKeyFactory.RC4 ARCFOUR

        Signature.NONEwithECDSA sun.security.pkcs11.P11Signature

        KeyFactory.RSA sun.security.pkcs11.P11RSAKeyFactory

        KeyFactory.EC sun.security.pkcs11.P11DHKeyFactory

        KeyPairGenerator.DSA sun.security.pkcs11.P11KeyPairGenerator

        Provider.id info        SunPKCS11-NSSfips using library null

        MessageDigest.SHA1 sun.security.pkcs11.P11Digest

        Signature.DSA sun.security.pkcs11.P11Signature

        MessageDigest.SHA-256 sun.security.pkcs11.P11Digest

        MessageDigest.MD5 sun.security.pkcs11.P11Digest

        MessageDigest.MD2 sun.security.pkcs11.P11Digest

        KeyGenerator.DESede sun.security.pkcs11.P11KeyGenerator       

Comments

Locked Post
New comments cannot be posted to this locked post.

Post Details

Locked on May 25 2014
Added on Apr 27 2014
0 comments
1,190 views