How the new cipher AES256-CBC would affect Enterprise Vault MPIP decryption feature

book

Article ID: 100060576

calendar_today

Updated On:

Description

Error Message

The following error message could be observed

'Something bad happened: AESCryptoWriter: Failed to transform final block.' 

Cause

MIP SDK 1.12.61 in use by Enterprise Vault is not fully compatible with the new cipher.

Resolution

There are no plans to address this issue by way of a patch or hotfix in the current or previous versions of the software at the present time. However, the issue is currently scheduled to be addressed in the next major revision of the product. Please note that Veritas Technologies LLC reserves the right to remove any fix from the targeted release if it does not pass quality assurance tests.  Veritas’ plans are subject to change and any action taken by you based on the above information or your reliance upon the above information is made at your own risk.

Issue/Introduction

Starting in August 2023, the AES256-CBC is the default encryption mode across all applications using Microsoft Purview Information Protection (MPIP). Enterprise Vault 14.4 uses MIP SDK 1.12.61 and might encounter some issues with the new cipher.

Additional Information

JIRA: CFT-5722