JOSEException: Unsupported MGF1 digest: SHA-256. Only SHA-1 supported

Issue #310 duplicate
Former user created an issue

Hi, I have an issue, I'm trying to generate a KeyPair and store in keyStore using the KeyGenParameterSpec, but when I try to decrypt the jwe I get this exception

I'm setting the Digest to SHA-1 to prevent this, but it doesn't work

Here is my code

//Generate KeyPair

val keyPairGenerator = KeyPairGenerator.getInstance(KeyProperties.KEY_ALGORITHM_RSA) val keyGenParameterSpec = KeyGenParameterSpec.Builder(Constants.RSA_KEY_PAIR, KeyProperties.PURPOSE_ENCRYPT or KeyProperties.PURPOSE_DECRYPT) .setDigests(KeyProperties.DIGEST_SHA1) .setKeySize(Constants.RSA_KEY_SIZE) .build() keyPairGenerator.initialize(keyGenParameterSpec) val rsaKeyPair = keyPairGenerator.generateKeyPair()

//Generate ContentEncryptionKey

val keyGenerator = KeyGenerator.getInstance(KeyProperties.KEY_ALGORITHM_AES) keyGenerator.init(EncryptionMethod.A256CBC_HS512.cekBitLength()) val cek = keyGenerator.generateKey()

//Generate JWE

val jwe = JWEObject(JWEHeader(JWEAlgorithm.RSA_OAEP_256, EncryptionMethod.A256CBC_HS512), Payload("Hello World")) jwe.encrypt(RSAEncrypter(rsaKeyPair.public as RSAPublicKey, cek))

//Decrypt jwe

val jwe = JWEObject.parse(jwe) jwe.decrypt(RSADecrypter(rsaKeyPair.private))

Thank you

Comments (1)

  1. Log in to comment