A128CBC-HS256 Potentially returning the wrong keysize

Description

From what I can see, A128CBC-HS256 requires a key length of 256 bits —perhaps slightly unintuitive given that AES128 uses 128-bit keys.

Before I update this, I am not sure if, a) I am correct and, b) there is no impact on the OP ?

Environment

None

Activity

Philip Smart 
January 23, 2023 at 11:19 AM

I’ve made this change to the algorithm keysize

Philip Smart 
January 18, 2023 at 6:06 PM

Which would follow on to the others as well e.g. A256CBC-HS512

Philip Smart 
January 18, 2023 at 6:01 PM

So I still think the Algorithm Descriptor will need to return 256 as the key length.

Philip Smart 
January 18, 2023 at 6:00 PM

Ah right, it is doing 128 bit AES encryption, but also creating a 256-bit MAC. Hence the key size needs to be 256 bits.

Fixed

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Created January 18, 2023 at 5:58 PM
Updated January 23, 2023 at 11:19 AM
Resolved January 23, 2023 at 11:19 AM