IC70351: ENCRYPT ACTION INCORRECTLY REMOVES ATTRIBUTE NAMESPACE

APAR status

• Closed as program error.

Error description

• When the element to encrypt has specified empty default
  namespace, while its parent has non empty default namespace, DP
  encrypt then decrypt actions will not generate the identical
  xml.
  

Local fix

Problem summary

• When an xml element to be encrypted has an explicit empty XML
  namespace, while its parent has a non-empty namespace, the
  ecplicit empyt namespace will be omitted from the encrypted
  data, resulting in a change of meaning of the resulting XML
  after decryption.  This only occurs during element encryption
  (not document encryption) and only if the element being
  encrypted has an explicit empty string as its namespace.
  

Problem conclusion

• Fix encryption canonicalization of inherited namespaces.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R373 PSY

     UP

• R380 PSY

     UP

• R381 PSY

     UP