Sun为XML-Enc规范提供了Java API？ [英] Sun provides a Java API to the XML-Enc specification?

问题描述

我正在搜索是否有如何执行XML-Enc规范 http：//en.wikipedia .org / wiki / XML_Encryption ，而不使用像Apache Santuario这样的外部API。

提前感谢

解决方案

不，没有内部的XML加密库，因为JSR-106已被撤销。所以你必须使用外部API。不幸的是，Santuario API并不像Java运行时包含的大多数API那么干净。

http://www.jcp.org/en/jsr/detail?id=106

使用任何XML加密库时，请确保在解密之前验证内容，否则您将遇到问题填充oracle攻击（这个警告是在W3C XML加密规范中，但是经常被忽略）。

I`m searching if there is how to execute the XML-Enc specification http://en.wikipedia.org/wiki/XML_Encryption without use of external APIs like Apache Santuario.

Thanks in advance!

解决方案

Nope, there is no internal XML encryption library, because the JSR-106 has been withdrawn. So you have to use a external API. Unfortunately the Santuario API is not as clean as most API's that are included in the Java runtime.

http://www.jcp.org/en/jsr/detail?id=106

PS when using any XML encryption library, be sure to verify the content before decrypting, or you will have problems with e.g. padding oracle attacks (this warning is in the W3C XML encryption specification, but it is ignored all to often).

这篇关于Sun为XML-Enc规范提供了Java API？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！