IllegalArgumentException getting a master key due to localization

Problem:

Coming from opensearch-project/flow-framework#233 (comment)

The code in JceMasterKey.getInstance() does an uppercase conversion without locale information:

aws-encryption-sdk-java/src/main/java/com/amazonaws/encryptionsdk/jce/JceMasterKey.java

Lines 57 to 68 in 43e078a

    
           public static JceMasterKey getInstance( 
        
               final SecretKey key, 
        
               final String provider, 
        
               final String keyId, 
        
               final String wrappingAlgorithm) { 
        
             switch (wrappingAlgorithm.toUpperCase()) { 
        
               case "AES/GCM/NOPADDING": 
        
                 return new JceMasterKey(provider, keyId, JceKeyCipher.aesGcm(key)); 
        
               default: 
        
                 throw new IllegalArgumentException("Right now only AES/GCM/NoPadding is supported"); 
        
             } 
        
           }

When operating in some locales, the case check fails. For example, locale tr-TR converts the "i" in padding to this unicode character.

This is noted here:

For instance with the Turkish language, when converting the small letter 'i' to upper case, the result is capital letter 'I' with a dot over it.

Solution:

The toUppercase() call in the above code (and everywhere, really) should specify Locale.ROOT.

String WRAPPING_ALGORITHM = "AES/GCM/NoPadding";
String t1 = WRAPPING_ALGORITHM.toUpperCase();
String t2 = WRAPPING_ALGORITHM.toUpperCase(Locale.ROOT);

t1 in hex: 41 45 53 2F 47 43 4D 2F 4E 4F 50 41 44 44 C4 B0 4E 47
t2 in hex: 41 45 53 2F 47 43 4D 2F 4E 4F 50 41 44 44 49 4E 47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Problem:

Solution:

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

	public static JceMasterKey getInstance(
	final SecretKey key,
	final String provider,
	final String keyId,
	final String wrappingAlgorithm) {
	switch (wrappingAlgorithm.toUpperCase()) {
	case "AES/GCM/NOPADDING":
	return new JceMasterKey(provider, keyId, JceKeyCipher.aesGcm(key));
	default:
	throw new IllegalArgumentException("Right now only AES/GCM/NoPadding is supported");
	}
	}

Description

Problem:

Solution:

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions