PI27954: WL.SECURITYUTILS.DECRYPT FAILS TO DECRYPT ON ANDROID 4.3 AND EARLIER

IBM MobileFirst Platform Foundation Interim Fix README for 6.3
IBM Worklight Interim Fix README for 6.2.0.1

APAR status

• Closed as program error.

Error description

• WL.SecurityUtils.decrypt fails to decrypt on Android 4.3 and
  earlier
  
  Additional Keywords:
  
  Worklight Versions Affected: 5.x, 6.x
  
  Initial Impact: High
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Developers using the WL.SecurityUtils.decrypt function on    *
  * hybrid Android 4.2.2 and 4.3.x that is trying to decrypt a   *
  * string that contains null characters such as '0x00' and      *
  * '\u000'.                                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When using the decrypt method to decrypt a string that has   *
  * null characters in the decrypted text, everything decrypts   *
  * correctly in native, but at the moment when you pass the     *
  * result back to native, the string sent back is incorrect.    *
  * This is due to a problem with the Webview code that does not *
  * properly handle the transfer of these strings.               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• After applying the related iFix, WL.SecurityUtils.decrypt should
  work correctly on all platforms. It was fixed by sending the
  result from native back to the JS layer using a different plugin
  result from Cordova.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WL/MOBILE1ST PL

• Fixed component ID

  5725I4300

Applicable component levels

• R630 PSY

     UP

• R620 PSY

     UP