CODEWITHSUNDEEP
javaxmlsecurityencryption
Alexandre
Alexandre

Reputation: 363

Sun provides a Java API to the XML-Enc specification?

I`m searching if there is how to execute the XML-Enc specification http://en.wikipedia.org/wiki/XML_Encryption without use of external APIs like Apache Santuario.

Thanks in advance!

Upvotes: 2

Views: 677

Answers (1)

Maarten Bodewes
Maarten Bodewes

Reputation: 93948

Nope, there is no internal XML encryption library, because the JSR-106 has been withdrawn. So you have to use a external API. Unfortunately the Santuario API is not as clean as most API's that are included in the Java runtime.

http://www.jcp.org/en/jsr/detail?id=106

PS when using any XML encryption library, be sure to verify the content before decrypting, or you will have problems with e.g. padding oracle attacks (this warning is in the W3C XML encryption specification, but it is ignored all to often).

Upvotes: 1

Related Questions