Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support AES128-GCM encryption #102

Open
SteelWagstaff opened this issue Dec 21, 2021 · 0 comments
Open

Support AES128-GCM encryption #102

SteelWagstaff opened this issue Dec 21, 2021 · 0 comments

Comments

@SteelWagstaff
Copy link
Member

SteelWagstaff commented Dec 21, 2021 •
edited
Loading

The default method of encryption for new Shibboleth IdP installations is now AES128-GCM (rather than the older AES128-CBC). We should ensure that we support this method of encryption in our plugin, to reduce problems for users which rely on this for encrypting their outgoing claims. See https://www.ukfederation.org.uk/content/Documents/IdPEncryptionOptions for details.

Appears to be supported in https://github.com/onelogin/php-saml/releases/tag/3.6.0, though more investigation is needed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@SteelWagstaff