Martin Hoffmann created CAMEL-12858:
---------------------------------------

             Summary: Enhance the AS2 Component to support SHA2 Hashs with 
RSA-PSS
                 Key: CAMEL-12858
                 URL: https://issues.apache.org/jira/browse/CAMEL-12858
             Project: Camel
          Issue Type: New Feature
          Components: camel-as2
    Affects Versions: 2.22.1
            Reporter: Martin Hoffmann


The use of AS2 in Germany for business application could require to follow 
regulations set by the BSI (German Federal Office for Information Security).

The BSI requeries to use RSASSA-PSS (Probabilistic signature scheme) or MGF1 
(Mask generation function) when sending signed SMIME-messages between public 
institutions. As AS2 uses SMIME as message structur this regulation affects AS2 
implementation used in Germany.

[https://en.wikipedia.org/wiki/Probabilistic_signature_scheme]

[https://en.wikipedia.org/wiki/Mask_generation_function]

The BouncyCastle libary already supports RSA-PSS or MGF1.

See https://www.bouncycastle.org/specifications.html
 * SHA1withRSAandMGF1
 * SHA256withRSAandMGF1
 * SHA384withRSAandMGF1
 * SHA512withRSAandMGF1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to