Question about AES-128 encryption

[former_member348280]

Hy,

I´m trying to decrypt a file that has a field thatu2019s encrypted in AES-128, but it fails.

I managed to install the certificate for encryption into a PSE in the STRUST and think its working properly.

If I use SSF02 I can envelop and develop without any problems any generated text.

I suspect thatu2019s because I´m using PCKS#7. I´m not sure if PCKS7 is only the format the certificate is stored in the PSE or it is the only format of encryption/decryption the functions admit.

Would be great, if someone could clarify my doubt.

Additionally, someone knows what options I have to decrypt a AES-128 encrypted file?

Thanks a lot for your help.

[former_member348280]

Hi,

SSF works only with PCKS#7 format. It's not format used for storing a certificate. PCKS#7 is using PKI so for each message a session key is generated and used for encrypting data using symmetric cipher (e.g. AES). This session key is encrypted by public key. Only receiver has a private key and hence decrypt a session key and then whole message.

If you have a field encrypted just by AES then you can't use SSF. It's also important to know what encryption mode is used. don't know about implementation of AES in ABAP. So you can try implement your own AES (it shouldn't be that hard) or to use external commands to decrypt data.

Cheers

[mvoros]

Hi,

SSF works only with PCKS#7 format. It's not format used for storing a certificate. PCKS#7 is using PKI so for each message a session key is generated and used for encrypting data using symmetric cipher (e.g. AES). This session key is encrypted by public key. Only receiver has a private key and hence decrypt a session key and then whole message.

If you have a field encrypted just by AES then you can't use SSF. It's also important to know what encryption mode is used. don't know about implementation of AES in ABAP. So you can try implement your own AES (it shouldn't be that hard) or to use external commands to decrypt data.

Cheers

[former_member348280]

Thanks a lot for you help martin.

Do you now if there is a "easy" way to do this in the JAVA stack?

[former_member348280]

Thanks a lot for you help martin.

Do you now if there is a "easy" way to do this in the JAVA stack?

[mvoros]

There is heaps of Java library that implement AES so it shouldn't be a problem.

Cheers

[former_member348280]

Thanks a lot Martin.

I will go over to the java forum and ask if someone did this before.