Update myinfo encryptedAndSignedPersona to use enc A256GCM

opengovsg · Sep 11, 2024 · 63befb1 · 63befb1
1 parent c9cebab
commit 63befb1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/express/myinfo/controllers.js b/lib/express/myinfo/controllers.js
@@ -50,7 +50,7 @@ module.exports =
       const encryptedAndSignedPersona = await new jose.CompactEncrypt(
         Buffer.from(sign),
       )
-        .setProtectedHeader({ alg: 'RSA-OAEP', enc: 'A128CBC-HS256' })
+        .setProtectedHeader({ alg: 'RSA-OAEP', enc: 'A256GCM' })
         .encrypt(publicKey)
       return encryptedAndSignedPersona
     }