Decryption of CDOC 1.0 container encrypted by JDigiDoc 3.12.0-785 results with broken datafile content

[sgaktors]

Decryption of CDOC 1.0 container encrypted by JDigiDoc 3.12.0-785 results with broken datafile content. E.g decryption works without errors, however the org.openeid.cdoc4j.DataFile content differs from the expected.
The decryption of the same cdoc container using JDigiDoc 3.x library works fine.

CDOC Library used for decryption: org.open-eid.cdoc4j 1.3.

Container and algorithm details:

...
</denc:CipherValue></denc:CipherData>denc:EncryptionProperties<denc:EncryptionProperty Name="LibraryVersion">JDigiDoc|3.12.0-785</denc:EncryptionProperty><denc:EncryptionProperty Name="DocumentFormat">ENCDOC-XML|1.0</denc:EncryptionProperty><denc:EncryptionProperty Name="Filename">XX-response.xml</denc:EncryptionProperty><denc:EncryptionProperty Name="OriginalMimeType">text/xml</denc:EncryptionProperty><denc:EncryptionProperty Name="OriginalSize">8843</denc:EncryptionProperty></denc:EncryptionProperties></denc:EncryptedData>

[purikas]

Can confirm this issue - I've had also problems with decrypting cdoc containers created with jdigidoc 3.x

[andresrosenthal]

I was unable to reproduce the given issue.
Could you give more input about the setup?

Ideally it would be really nice to receive a mini (for example: maven) project that demonstrates the given issue just by running it.
If that's too much to ask for then could you produce it with PKCS#12 and give following inputs to help in reproducing the issue:

• JDigiDoc code used for encryption
• Original datafile
• Encrypted cdoc
• Soft certificate & private key

You could use this for soft certificate & priv key: https://github.com/open-eid/cdoc4j/blob/master/src/test/resources/rsa/rsa.p12

[purikas]

I was unable to reproduce the given issue.
Could you give more input about the setup?

Discovered issue when trying to interface with 3rd party REST API which uses PKCS#12 encryption.

* JDigiDoc code used for encryption

Can't share the code as it's property of 3rd party.

[purikas]

Unfortunately also can't use any other keys apart from the keys supplied by 3rd party.

[andresrosenthal]

JDigiDoc is a dead project, actually for quite some time now.
If you're not able to supply any relevant information that'll help us potentially find the issue,
then I'm afraid this is a dead end

[sgaktors]

Sorry for delay. Same case, unfortunately can't share the 3rd part code.