Support MGF1 digest SHA-256 when decrypt a JWE

[Omar Joya]

Support digest SHA-256 to decrypt a JWE using a PrivateKey stored on the KeyStore to prevent exception

JOSEException: Unsupported MGF1 digest: SHA-256. Only SHA-1 supported

[Connect2id OSS]

Which JWE “alg” and “enc” are you referring to?

[Omar Joya]

JWEAlgorithm.RSA_OAEP_256
EncryptionMethod.A256CBC_HS512

[Vladimir Dzhuvinov]

It appears that the KeyStore you mention doesn’t support MGF1 digest with SHA-256.

If you’re doing a RSA encryption in a HSM or similar module, all crypto ops required by RSA_OAEP_256 need to be supported there. If not, you get the above error message.

[Vladimir Dzhuvinov]

Issue with alg support in KeyStore

[Vladimir Dzhuvinov]

Issue #310 was marked as a duplicate of this issue.