fix: myinfo encryptedAndSignedPersona to use enc A256GCM

opengovsg · Sep 12, 2024 · 448a51e · 448a51e
1 parent c9cebab
commit 448a51e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/express/myinfo/controllers.js b/lib/express/myinfo/controllers.js
@@ -50,7 +50,7 @@ module.exports =
       const encryptedAndSignedPersona = await new jose.CompactEncrypt(
         Buffer.from(sign),
       )
-        .setProtectedHeader({ alg: 'RSA-OAEP', enc: 'A128CBC-HS256' })
+        .setProtectedHeader({ alg: 'RSA-OAEP', enc: 'A256GCM' })
         .encrypt(publicKey)
       return encryptedAndSignedPersona
     }