XML deserialize and decrypting encoding problem. Please help me

Question

This is my first topic here, so at first I'd like to say "Hi" everyone and apologise for my bad english ;)
I have just finished my new application about signing/checking and encrypting/decrypting XML files. I use Apache XML Security packages to do this.
Everything works fine, instead of one...
I'm Polish and sometimes I have to encrypt or decrypt XML which includes polish letters like: 'ą' , 'ę', 'ł' and some others... If I encrypt such file, it succeeds. The problem is when I try to decrypt such an encrypted file. I recieve an error like :
"[Fatal Error] :2:7: An invalid XML character (Unicode: 0x19) was found in the element content o
f the document.
gov.mf.common.exceptions.SenderException: E_SENDER_DECRYPTION
at gov.mf.common.xml.encryption.EncryptTool.decrypt(Unknown Source)
at gov.mf.CERBER.TestCBR.main(Unknown Source)
Caused by: org.apache.xml.security.encryption.XMLEncryptionException: An invalid XML character
(Unicode: 0x19) was found in the element content of the document.
Original Exception was org.xml.sax.SAXParseException: An invalid XML character (Unicode: 0x19)
was found in the element content of the document.
at org.apache.xml.security.encryption.XMLCipher$Serializer.deserialize(Unknown Source)
at org.apache.xml.security.encryption.XMLCipher.decryptElement(Unknown Source)
at org.apache.xml.security.encryption.XMLCipher.doFinal(Unknown Source)
... 2 more
What's wrong? My XML document is UTF-8 encoded, with or without BOM. I wrote in in Notepad++ or any other editior which has UTF-8 encoding.
I'm parsing my XML with DOM. There is an interesting line in an error above like: " at org.apache.xml.security.encryption.XMLCipher$Serializer.deserialize(Unknown Source)" , do you know that?
Everything is fine when I try to encrypt/decrypt '�' or 'ń', but things go wrong with 'ą', 'ę', 'ł' and others... I also managed to encrypt and decrypt 'ł' but unfortunately, after decryption 'ł' turns into 'B'. It obviously an encoding problem, but how to fix it?
I would be really thankfull if some of You guys would help me.
Looking forward fo any answers.
Matthew
Message was edited by:
matthew_pl

Answer 1

Hi once again.
I still don't havy any solution to my problem. I used Apache XML Security examples to encrypt/decrypt my XML document with Polish charaters but I also recieve the same error. What's wrong?
Here is some code:
----- Parsing XML do Document ------
DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
     //Bardzo wazna linijka - bless TEK ;)
     factory.setNamespaceAware(true);
     DocumentBuilder builder;
     builder = factory.newDocumentBuilder();
     File f = new File(Const.FILE_IN_PATH + File.separator + Const.FILE_IN);     
     org.w3c.dom.Document doc = builder.parse(f);
---------- Encrypting & Decrypting XML document (whole class) -------------
import java.io.*;
import java.security.*;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.DESedeKeySpec;
import org.w3c.dom.Document;
import org.w3c.dom.Element;
import org.apache.xml.security.keys.KeyInfo;
import org.apache.xml.security.utils.EncryptionConstants;
import org.apache.xml.security.encryption.XMLCipher;
import org.apache.xml.security.encryption.EncryptedData;
import org.apache.xml.security.encryption.EncryptedKey;
public class EncryptTool
private PublicKey publicKey;     
private PrivateKey privateKey;
static
org.apache.xml.security.Init.init();
public EncryptTool()
     publicKey = KeyStores.getCerberPublicKey();
     privateKey = KeyStores.getCerberPrivateKey();
public Document encrypt(Document doc, String sufix)
try
     byte[] passPhrase = "24 Bytes per DESede key!".getBytes("UTF-8");
     DESedeKeySpec keySpec = new DESedeKeySpec(passPhrase);
     SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DESede");
     SecretKey secretKey = keyFactory.generateSecret(keySpec);
     XMLCipher keyCipher = XMLCipher.getInstance(XMLCipher.RSA_v1dot5);
     keyCipher.init(XMLCipher.WRAP_MODE, publicKey);
     EncryptedKey encryptedKey = keyCipher.encryptKey(doc, secretKey);
          Element elementToEncrypt = (Element) doc.getDocumentElement();
          System.out.println("Szyrfuję: " + elementToEncrypt.getTextContent());
          XMLCipher xmlCipher = XMLCipher.getInstance(XMLCipher.TRIPLEDES);
          xmlCipher.init(XMLCipher.ENCRYPT_MODE, secretKey);
          EncryptedData encryptedDataElement = xmlCipher.getEncryptedData();
          KeyInfo keyInfo = new KeyInfo(doc);
          keyInfo.add(encryptedKey);
          encryptedDataElement.setKeyInfo(keyInfo);
          boolean encryptContentsOnly = true;
          xmlCipher.doFinal(doc, elementToEncrypt, encryptContentsOnly);
          // output the resulting document
          String [] parts = Const.FILE_IN.split("\\.");
          String saveAs = Const.FILE_OUT_PATH + File.separator + parts[0] + sufix + "." + parts[1];
          OutputStream os = new FileOutputStream(saveAs);
          XMLUtil.sameXMLtoFile(doc, os);
} catch (Exception ex)
     throw new TestCBRException("E_CERBER_ENCRYPTION", ex);
return doc;
public void decrypt(Document doc, String sufix) throws SenderException
try
          String namespaceURI = EncryptionConstants.EncryptionSpecNS;
     String localName = EncryptionConstants._TAG_ENCRYPTEDDATA;
     int ile = doc.getElementsByTagNameNS(namespaceURI, localName).getLength();
     if (ile == 0) throw new SenderException("E_SENDER_DECRYPTION_NEEDED");
     for(int i=0; i < ile; i++)
     Element encryptedDataElement = (Element) doc.getElementsByTagNameNS(namespaceURI, localName).item(0);
     XMLCipher xmlCipher = XMLCipher.getInstance();
     xmlCipher.init(XMLCipher.DECRYPT_MODE, null);
     xmlCipher.setKEK(privateKey);
     xmlCipher.doFinal(doc, encryptedDataElement);
               String [] parts = Const.FILE_IN.split("\\.");
               String saveAs = Const.FILE_OUT_PATH + parts[0] + sufix + "." + parts[1];
               OutputStream os = new FileOutputStream(saveAs);
                    XMLUtil.saveXMLtoFile(doc, os);
} catch (SenderException ex) {
     throw ex;
} catch (Exception ex) {
     throw new SenderException("E_SENDER_DECRYPTION", ex);
Please help me. I'm going into madness what's wrong with it...