Hybrid Cyphers, e.g. McEliece cryptosystem does not work in operations view, as you ca

Flexiprovider Integration: Hybrid Ciphers in Operations View not working about core HOT 2 CLOSED

jcryptool commented on August 28, 2024

Flexiprovider Integration: Hybrid Ciphers in Operations View not working

from core.

Comments (2)

commented on August 28, 2024

The problem is probably caused by a mix-up of calling initEncrypt(...) and initDecrypt(...) in
org.jcryptool.crypto.flexiprovider.engines.cipher.AsymmetricHybridCipherEngine.init(...).

In the decrypt-Branch in lines 54/55 it should be initDecrypt(...) insteadof initEncrypt and in the else-branch in line 59 it should be initEncrypt instead of initDecrypt.


@Override
public KeyObject init(IFlexiProviderOperation operation) {
LogUtil.logInfo("initializing asymmetric hybrid cipher engine"); //$NON-NLS-1$
this.operation = operation;
char[] password = null;
Key key = null;
try {
cipher = Registry.getAsymmetricHybridCipher(operation.getAlgorithmDescriptor().getAlgorithmName());
if (operation.getOperation().equals(OperationType.DECRYPT)) {
            // password may be contained in the ActionItem, otherwise prompt
            if (operation.getPassword() != null) {
                password = operation.getPassword();
            } else {
                password = promptPassword();
            }

            if (password == null) {
                return null;
            }

            key = (Key) KeyStoreManager.getInstance().getPrivateKey(operation.getKeyStoreAlias(), password);
            cipher.initEncrypt(key, operation.getAlgorithmDescriptor().getAlgorithmParameterSpec(), 
                    FlexiProviderEnginesPlugin.getSecureRandom()); //<----- should be initDecrypt
        } else {
            Certificate certificate = KeyStoreManager.getInstance().getCertificate(operation.getKeyStoreAlias());
            key = (Key) certificate.getPublicKey();
            cipher.initDecrypt(key, operation.getAlgorithmDescriptor().getAlgorithmParameterSpec());  //<----- should be initEncrypt
        }
    ...
    return new KeyObject(key, password);
}

from core.