Class SamlConstants.EncryptionAlgorithms

Namespace

Fdyay.IdentityServer.Saml

Assembly

Fdyay.IdentityServer.Saml.dll

XML Encryption algorithm URIs this server accepts for an EncryptedAssertion.

public static class SamlConstants.EncryptionAlgorithms

Inheritance

object

SamlConstants.EncryptionAlgorithms

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Remarks

One list, read by both the decryption path and the metadata writer. They have to agree: an algorithm advertised and not accepted is a legitimate choice a partner makes and we then refuse on every assertion, and the failure surfaces at their end as this server rejecting valid messages. RSA-1.5 is absent on purpose — it is the padding Bleichenbacher's attack targets, and an endpoint that decrypts what the network sends it is a decryption oracle by construction.

Fields

Aes128Cbc

AES-128 in CBC mode, for the encrypted content (XML Encryption Syntax and Processing).

public const string Aes128Cbc = "http://www.w3.org/2001/04/xmlenc#aes128-cbc"

Field Value

string

Aes192Cbc

AES-192 in CBC mode, for the encrypted content (XML Encryption Syntax and Processing).

public const string Aes192Cbc = "http://www.w3.org/2001/04/xmlenc#aes192-cbc"

Field Value

string

Aes256Cbc

AES-256 in CBC mode, for the encrypted content (XML Encryption Syntax and Processing).

public const string Aes256Cbc = "http://www.w3.org/2001/04/xmlenc#aes256-cbc"

Field Value

string

RsaOaep

Key transport. The only one accepted.

public const string RsaOaep = "http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"

Field Value

string

Properties

Accepted

Everything above, in the order metadata advertises it.

public static IReadOnlyList<string> Accepted { get; }

Property Value

IReadOnlyList<string>