Calling a web service where credentials are encrypted with AES encryption standard

paulc919 over 8 years ago

Hi - I have a requirement to call a web service where various elements of the input are to be encrypted using the AES encryption method so the receiving system can decrypt it using AES.

My services colleagues have achieved the desired outcome but it would appear they rely on the functions that javax.crypto can offer up - things like :-
java.util.Random, javax.crypto.Cipher, javax.crypto.SecretKey, javax.crypto.SecretKeyFactory, javax.crypto.spec.IvParameterSpec, javax.crypto.spec.PBEKeySpec, javax.crypto.spec.SecretKeySpec, org.apache.commons.codec.binary.Base64;

Ideally we would like to try and replicate what the services team have achieved in Appian - so we do not need to call the Fuse webservice and go direct to the source system.

My question is would Appian have access to the same functions or equivalent without having to write a plug in ?

Many thank...

Discussion posts and replies are publicly visible

0 paulc919 over 8 years ago

...s for any hints and tips, or even its not possible as it will save me a lot of time trying.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Stefan Helzle
A Score Level 3
over 8 years ago

You need plugin for this. Did you check shared components? There are some plugins available. Search for crypto.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 paulc919 over 8 years ago

Thanks Stefan for the hint - I'll take a look :-)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 paulc919 over 8 years ago

Sorry ... more help needed - it looks like we have that plug in installed on our cloud instance - when listing which providers I can see the one I want to use (or try to) as SunJCE: Cipher.AES -> com.sun.crypto.provider.AESCipher$General
aliases: [Rijndael]
attributes: {SupportedPaddings=NOPADDING|PKCS5PADDING|ISO10126PADDING, SupportedKeyFormats=RAW, SupportedModes=ECB|CBC|PCBC|CTR|CTS|CFB|OFB|CFB8|CFB16|CFB24|CFB32|CFB40|CFB48|CFB56|CFB64|OFB8|OFB16|OFB24|OFB32|OFB40|OFB48|OFB56|OFB64|GCM|CFB72|CFB80|CFB88|CFB96|CFB104|CFB112|CFB120|CFB128|OFB72|OFB80|OFB88|OFB96|OFB104|OFB112|OFB120|OFB128}
but when trying to check that relevant provider is valid using the functions provided I'm always hitting an error - I've tried a variety of combinations (AES, Cipher.AES, AESCipher etc) but I'm missing the magic formula for invoking the AES transformation - any help you can provide would be ace.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Stefan Helzle
A Score Level 3
over 8 years ago

I never used this plugin. Sorry ... Maybe the official JCE documentation helps.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 paulc919 over 8 years ago

@Stefan - I did have a look but not a lot of joy either. Thanks for the tips you have given though - much appreciated.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel