Re: [Trustedjava-support] AIK creation fails

[Thomas W. <tho...@ia...>]

Hi Anna,

> [...]
> When using the AIK creation methods in the example test I have problems
> to decrypt the IdentityReqBlob. During the method I get the following
> error:
> 
> [...]
> 
> Do you have any idea why the decryption here fails? The decryption of
> the symmetric key seems to work.

Your problem seems to be that you do not have installed the "Unlimited 
Strength Jurisdiction Policy Files" for the Java Crypto Extension (JCE). 
Without those files, you can not use all the algorithms and the length 
of your keys might be limited.
Please download the files form 
http://java.sun.com/j2se/1.5.0/download.jsp (at the bottom of the page) 
and install them in the jre/lib/security folder of your Java 
installation. With these files, the AIK creation should work.

The readme.txt shipped with the jTSS Wrapper and the jTSS website also 
mention that Java 1.5 with the "Unlimited Strength Jurisdiction Policy 
Files" is required for AIK creation (section 2.3.1, item 3).

Regards,
Thomas Winkler
IAIK, TU Graz, Austria