XML Encryption for Attributes

[Hermann-Core]

Encrypt sensitive attributes in SAML Assertions using SP's public key.

Tasks

• Use XML Encryption (AES + RSA-OAEP) per SAML spec
• Encrypt AttributeStatement or entire Assertion
• Include EncryptedKey in Response