keybase / keybase/keybase-issues

Vendor Not able to decrypt Version: BCPG v1.38 file

Open
#3,010 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

Hi All,

I've encrypted a file with encryption public key in 2 different systems. One is Solaris System and another one in Cleo Tool running on Linux. After encrypting the file in Solaris System I've got the below output PGP file.

![image](https://user-images.githubusercontent.com/29640914/27453457-2acc4ab0-57b4-11e7-9509-5e74bb1dc7a4.png)

After encrypting the same file with same encryption public key in Cleo tool, I've got the below output PGP file,

![image](https://user-images.githubusercontent.com/29640914/27453478-3c156784-57b4-11e7-85ba-c96250f4378b.png)

So My issue is Vendor was able to decrypt the McAfee E-Business Server v7.1.1 file and not able to decrypt BCPG v1.38 file. Vendor got the below Java error,

2017-06-20 09:13:07,755 ERROR [com.iclsystems.filehandler.N44PgpEncryptedFileHandler] Failed to process N44 PGP file: Failed to decrypt file: null
com.iclsystems.businessprocess.service.ServiceException: Failed to decrypt file: null
at com.iclsystems.businessprocess.service.PGPDecryption.decrypt(PGPDecryption.java:107)
at com.iclsystems.filehandler.N44PgpEncryptedFileHandler.process(N44PgpEncryptedFileHandler.java:35)
at com.iclsystems.ejb.FileHandlerBean.invokeHandler2(FileHandlerBean.java:155)
at com.iclsystems.ejb.FileHandlerBean.onMessage(FileHandlerBean.java:88)
at sun.reflect.GeneratedMethodAccessor972.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at org.jboss.ejb.MessageDrivenContainer$ContainerInterceptor.invoke(MessageDrivenContainer.java:460)
at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionInterceptor.java:185)
at org.jboss.ejb.plugins.MessageDrivenInstanceInterceptor.invoke(MessageDrivenInstanceInterceptor.java:62)
at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:84)
at org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxInterceptorCMT.java:240)
at org.jboss.ejb.plugins.TxInterceptorCMT.invoke(TxInterceptorCMT.java:128)
at org.jboss.ejb.plugins.RunAsSecurityInterceptor.invoke(RunAsSecurityInterceptor.java:90)
at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:191)
at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor.java:122)
at org.jboss.ejb.MessageDrivenContainer.internalInvoke(MessageDrivenContainer.java:374)
at org.jboss.ejb.Container.invoke(Container.java:700)
at org.jboss.ejb.plugins.jms.JMSContainerInvoker.invoke(JMSContainerInvoker.java:824)
at org.jboss.ejb.plugins.jms.JMSContainerInvoker$MessageListenerImpl.onMessage(JMSContainerInvoker.java:1114)
at org.jboss.jms.asf.StdServerSession.onMessage(StdServerSession.java:256)
at org.jboss.mq.SpyMessageConsumer.sessionConsumerProcessMessage(SpyMessageConsumer.java:633)
at org.jboss.mq.SpyMessageConsumer.addMessage(SpyMessageConsumer.java:433)
at org.jboss.mq.SpySession.run(SpySession.java:298)
at org.jboss.jms.asf.StdServerSession.run(StdServerSession.java:180)
at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:732)
at java.lang.Thread.run(Thread.java:534)
Caused by: java.lang.NullPointerException
at com.iclsystems.businessprocess.service.PGPDecryption.decrypt(PGPDecryption.java:66)
... 26 more

Can anyone Please help me on this issue. Why vendor was not able to decrypt BCPG v1.38 file

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by comparing the Solaris/McAfee E-Business Server v7.1.1 output with the Cleo Linux output produced using the same encryption public key. Review the vendor's PGPDecryption failure at PGPDecryption.java:66 and :107, then determine which BCPG v1.38 output difference causes the NullPointerException. Done means the cause is reproducible and the vendor can decrypt the affected file.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
cryptography
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.