密钥长度不是128/192/256位

Question

I am trying to encrypt the final mdm profile using the Identity certificate(got in the response after SCEP payload). I have the following code:

context.Request.InputStream.CopyTo(deviceResponse);

  var signer = new SignedCms();
  signer.Decode(deviceResponse.ToArray());
  X509Certificate2 certificate = signer.Certificates[0];
  string str= sonething; //my final configuraton profile                       
 encryptedProfile = AESEncryption(str, cerificate.GetPublicKeyString(), true, Encoding.Default, pkcs);

I got the exception: Key length not 128/192/256 bits.

How can I encrypt the final profile(I am using Bouncy Castle library)?

Regards

Mag

Answer 1

It seems like your "cerificate.GetPublicKeyString()" is not returning a key with the propper length (128/192/256 bits). The minimum you need is 128 bits (16 bytes = 16 length).

Answer 2

This should not be AES encryption. It has to be CMSAlgorithm.DES_EDE3_CBC encrypted.