See: http://www.nds.rub.de/research/publications/breaking-xml-encryption-pkcs15/

This fix avoids the problems described in that paper by taking two
measures:
- Require that decrypted contents is at least 4 bytes, since that is the
  shortest length of an XML element.
- Generate a (invalid) symmetric key that is deterministic for a given
  encrypted key and private key.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3132 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3131 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3130 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3129 44740490-163a-0410-bde0-09ae8108e29a

Thanks to David Gwynne for implementing this!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3128 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Brett Bieber for providing this patch!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3126 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3125 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3124 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3122 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3121 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3110 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3109 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3108 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Marco Ferrante for reporting this bug!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3107 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Ryan Panning for providing this patch!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3106 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3105 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3104 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Tim Ace for reporting this bug!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3103 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Ryan Panning for implementing this!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3102 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Sixto Martin for finding and fixing this bug!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3100 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3093 44740490-163a-0410-bde0-09ae8108e29a

This patch adds two enhancements to metadata generation:
 * Support for specifying attributes that are required.
 * Support for removing some of the AssertionConsumerService bindings.

Thanks to Benjamin Andresen for implementing this!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3092 44740490-163a-0410-bde0-09ae8108e29a

New A-Select module with an updated A-Select authentication source. The
new module gives us support for request signing, but we lose support
for A-Select Cross.

Thanks to Wessel Dankers for creating this module, and to Thijs
Kinkhorst for providing the patch.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3091 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3090 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Stefan Winter for implementing this!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3089 44740490-163a-0410-bde0-09ae8108e29a

This patch adds support parsing and generating metadata with the
mdui:UIInfo and mdui:DiscoHints elements.

Support for generating metadata with the extensions is added to the
SAML 2.0 IdP. It should also work through the metadata aggregator.

Thanks to Timothy Ace at Synacor, Inc. for implementing this!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3088 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3087 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3086 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3085 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3084 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3083 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3082 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3081 44740490-163a-0410-bde0-09ae8108e29a

Proper variable handling in Consent module to avoid notice. Thanks to pitbulk for supplying the patch.


git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3079 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3077 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Dick Visser for writing this document.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3075 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3073 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3070 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3069 44740490-163a-0410-bde0-09ae8108e29a

For consistency with other IdP events.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3068 44740490-163a-0410-bde0-09ae8108e29a