AES XTS mode and java.security.InvalidKeyException: java.security.InvalidAlgorithmParameterException: Algorithm parameters required

3 years ago

Originally Published: 2007-09-17

Article Number

000053124

Applies To

RSA Key Manager Server

RSA Key Manager Client

Issue

Exception is thrown when trying to encrypt

com.rsa.kmc.KMException: java.security.InvalidKeyException: java.security.InvalidAlgorithmParameterException: Algorithm parameters required.

Cause

When creating a Key Class on the RKM Server and specifying the Cipher, if AES is selected for the Algorithm and 256 or 512 is selected for the Key Size, one of the choices for the Mode is XTS. AES XTS mode is only used for the EMC PowerPath product and not supported by RKM Client.

Resolution

When creating a Key Class on the RKM Server, ensure that XTS mode is not specified unless the Key Class is going to be used by a product that supports it (such as EMC PowerPath).

Notes

For most applications, CBC mode should be used. For more information about the block cipher modes, see the Security Concepts document that is included with RKM Client and RKM Server (doc\security_concepts.pdf) > Symmetric Key Cryptography > Block Ciphers > Modes of Operation.

Don't see what you're looking for?

Related Articles

Trending Articles