Fuzz introspector: TokenUtilFuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
61 13 [org.keycloak.common.util.Base64].decode4to3(byte[],int,byte[],int,int) call site: {node_id}
45 102 [org.keycloak.common.util.Base64Url].encode(byte[]) call site: {node_id}
43 193 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) call site: {node_id}
28 243 [org.keycloak.util.TokenUtil].jweKeyEncryptionVerifyAndDecode(java.security.Key,java.lang.String) call site: {node_id}
15 172 [org.keycloak.jose.jwe.JWE].getHeader() call site: {node_id}
7 150 [org.keycloak.jose.jwe.JWERegistry].getAlgProvider(java.lang.String) call site: {node_id}
6 0 EP call site: {node_id}
6 80 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) call site: {node_id}
6 89 [org.keycloak.common.util.Base64].encodeBytes(byte[],int,int,int) call site: {node_id}
4 75 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) call site: {node_id}
4 188 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) call site: {node_id}
3 237 [org.keycloak.jose.jwe.JWE].verifyAndDecodeJwe(java.lang.String) call site: {node_id}

Fuzzer calltree

0 [TokenUtilFuzzer].fuzzerTestOneInput(com.code_intelligence.jazzer.api.FuzzedDataProvider) [function] [call site] 00000
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeInt(int,int) [function] [call site] 00001
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsString() [function] [call site] 00002
1 [org.keycloak.util.TokenUtil].isOfflineToken(java.lang.String) [function] [call site] 00003
2 [org.keycloak.util.TokenUtil].getRefreshToken(java.lang.String) [function] [call site] 00004
3 [org.keycloak.jose.jws.JWSInput]. (java.lang.String) [function] [call site] 00005
4 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00006
5 [org.keycloak.common.util.Base64Url].encodeBase64UrlToBase64(java.lang.String) [function] [call site] 00007
5 [org.keycloak.common.util.Base64].decode(java.lang.String) [function] [call site] 00008
6 [org.keycloak.common.util.Base64].decode(java.lang.String,int) [function] [call site] 00009
7 [org.keycloak.common.util.Base64].decode(byte[],int,int,int) [function] [call site] 00010
8 [org.keycloak.common.util.Base64].getDecodabet(int) [function] [call site] 00011
8 [org.keycloak.common.util.Base64].decode4to3(byte[],int,byte[],int,int) [function] [call site] 00012
9 [org.keycloak.common.util.Base64].getDecodabet(int) [function] [call site] 00013
4 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00014
4 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00015
4 [org.keycloak.util.JsonSerialization].readValue(byte[],java.lang.Class) [function] [call site] 00016
4 [org.keycloak.jose.jws.JWSInputException]. (java.lang.Throwable) [function] [call site] 00017
3 [org.keycloak.jose.jws.JWSInput].getContent() [function] [call site] 00018
3 [org.keycloak.util.TokenUtil].getRefreshToken(byte[]) [function] [call site] 00019
4 [org.keycloak.util.JsonSerialization].readValue(byte[],java.lang.Class) [function] [call site] 00020
4 [org.keycloak.jose.jws.JWSInputException]. (java.lang.Throwable) [function] [call site] 00021
2 [org.keycloak.representations.JsonWebToken].getType() [function] [call site] 00022
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsBytes() [function] [call site] 00023
1 [org.keycloak.util.TokenUtil].getRefreshToken(byte[]) [function] [call site] 00024
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsBytes() [function] [call site] 00025
1 [org.keycloak.util.TokenUtil].jweDirectEncode(java.security.Key,java.security.Key,byte[]) [function] [call site] 00026
2 [org.keycloak.jose.jwe.JWEHeader]. (java.lang.String,java.lang.String,java.lang.String) [function] [call site] 00027
2 [org.keycloak.jose.jwe.JWE]. () [function] [call site] 00028
3 [org.keycloak.jose.jwe.JWEKeyStorage]. () [function] [call site] 00029
2 [org.keycloak.jose.jwe.JWE].header(org.keycloak.jose.jwe.JWEHeader) [function] [call site] 00030
2 [org.keycloak.jose.jwe.JWE].content(byte[]) [function] [call site] 00031
2 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00032
2 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00033
2 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00034
2 [org.keycloak.jose.jwe.JWE].encodeJwe() [function] [call site] 00035
3 [org.keycloak.jose.jwe.JWE].encodeJwe(org.keycloak.jose.jwe.alg.JWEAlgorithmProvider,org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00036
4 [org.keycloak.jose.jwe.JWEHeader].getAlgorithm() [function] [call site] 00037
4 [org.keycloak.jose.jwe.JWEHeader].getEncryptionAlgorithm() [function] [call site] 00038
4 [org.keycloak.jose.jwe.JWEKeyStorage].setEncryptionProvider(org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00039
4 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00040
5 [org.keycloak.jose.jwe.JWEKeyStorage].generateCekBytes() [function] [call site] 00041
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes128CbcHmacSha256Provider:org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes192CbcHmacSha384Provider:org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes256CbcHmacSha512Provider:org.keycloak.jose.jwe.enc.AesCbcHmacShaJWEEncryptionProvider:org.keycloak.jose.jwe.enc.AesGcmJWEEncryptionProvider].getExpectedCEKLength() [function] [call site] 00042
6 [org.keycloak.jose.jwe.JWEUtils].generateSecret(int) [function] [call site] 00043
5 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].deserializeCEK(org.keycloak.jose.jwe.JWEKeyStorage) [function] [call site] 00044
6 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00045
7 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].serializeCEK(org.keycloak.jose.jwe.JWEKeyStorage) [function] [call site] 00046
8 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00047
7 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].serializeCEK(org.keycloak.jose.jwe.JWEKeyStorage) [function] [call site] 00048
8 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00049
8 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00050
6 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00051
5 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].deserializeCEK(org.keycloak.jose.jwe.JWEKeyStorage) [function] [call site] 00052
6 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00053
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaJWEEncryptionProvider].getExpectedCEKLength() [function] [call site] 00054
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes128CbcHmacSha256Provider].getExpectedCEKLength() [function] [call site] 00055
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes192CbcHmacSha384Provider].getExpectedCEKLength() [function] [call site] 00056
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes256CbcHmacSha512Provider].getExpectedCEKLength() [function] [call site] 00057
6 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00058
6 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00059
4 [org.keycloak.crypto.fips.FIPSRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00060
5 [org.bouncycastle.crypto.asymmetric.AsymmetricRSAPublicKey]. (org.bouncycastle.crypto.Algorithm,byte[]) [function] [call site] 00061
5 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00062
5 [org.bouncycastle.crypto.fips.FipsRSA$KeyWrapOperatorFactory]. () [function] [call site] 00063
4 [org.keycloak.crypto.elytron.AesKeyWrapAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00064
5 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00065
4 [org.keycloak.crypto.def.AesKeyWrapAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00066
5 [org.bouncycastle.crypto.engines.AESWrapEngine]. () [function] [call site] 00067
5 [org.bouncycastle.crypto.params.KeyParameter]. (byte[]) [function] [call site] 00068
5 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00069
4 [org.keycloak.crypto.fips.FIPSAesKeyWrapAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00070
5 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00071
5 [org.bouncycastle.crypto.SymmetricSecretKey]. (org.bouncycastle.crypto.Parameters,byte[]) [function] [call site] 00072
5 [org.bouncycastle.crypto.fips.FipsAES$KeyWrapOperatorFactory]. () [function] [call site] 00073
4 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00074
5 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].getCipherProvider() [function] [call site] 00075
5 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00076
5 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryption256JWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00077
5 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00078
4 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00079
5 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].getCipherProvider() [function] [call site] 00080
5 [org.keycloak.crypto.def.DefaultRsaKeyEncryption256JWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00081
5 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00082
5 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00083
4 [org.keycloak.jose.jwe.alg.DirectAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00084
4 [org.keycloak.jose.jwe.JWEKeyStorage].getEncryptionKey() [function] [call site] 00085
4 [org.keycloak.common.util.Base64Url].encode(byte[]) [function] [call site] 00086
5 [org.keycloak.common.util.Base64].encodeBytes(byte[]) [function] [call site] 00087
6 [org.keycloak.common.util.Base64].encodeBytes(byte[],int,int,int) [function] [call site] 00088
7 [org.keycloak.common.util.Base64].encodeBytesToBytes(byte[],int,int,int) [function] [call site] 00089
8 [org.keycloak.common.util.Base64$OutputStream]. (java.io.OutputStream,int) [function] [call site] 00090
9 [org.keycloak.common.util.Base64].access$000(int) [function] [call site] 00091
10 [org.keycloak.common.util.Base64].getDecodabet(int) [function] [call site] 00092
8 [org.keycloak.common.util.Base64$OutputStream].close() [function] [call site] 00093
9 [org.keycloak.common.util.Base64$OutputStream].flushBase64() [function] [call site] 00094
10 [org.keycloak.common.util.Base64].access$300(byte[],byte[],int,int) [function] [call site] 00095
11 [org.keycloak.common.util.Base64].encode3to4(byte[],byte[],int,int) [function] [call site] 00096
12 [org.keycloak.common.util.Base64].encode3to4(byte[],int,int,byte[],int,int) [function] [call site] 00097
13 [org.keycloak.common.util.Base64].getAlphabet(int) [function] [call site] 00098
8 [org.keycloak.common.util.Base64$OutputStream].close() [function] [call site] 00099
8 [org.keycloak.common.util.Base64].encode3to4(byte[],int,int,byte[],int,int) [function] [call site] 00100
8 [org.keycloak.common.util.Base64].encode3to4(byte[],int,int,byte[],int,int) [function] [call site] 00101
5 [org.keycloak.common.util.Base64Url].encodeBase64ToBase64Url(java.lang.String) [function] [call site] 00102
4 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].encodeJwe(org.keycloak.jose.jwe.JWE) [function] [call site] 00103
5 [org.keycloak.jose.jwe.JWE].getContent() [function] [call site] 00104
5 [org.keycloak.jose.jwe.JWEUtils].generateSecret(int) [function] [call site] 00105
5 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00106
5 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00107
5 [org.keycloak.jose.jwe.enc.AesGcmJWEEncryptionProvider].getExpectedAesKeyLength() [function] [call site] 00108
5 [org.keycloak.jose.jwe.JWE].getBase64Header() [function] [call site] 00109
6 [org.keycloak.util.JsonSerialization].writeValueAsBytes(java.lang.Object) [function] [call site] 00110
6 [org.keycloak.common.util.Base64Url].encode(byte[]) [function] [call site] 00111
5 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].encryptBytes(byte[],byte[],java.security.Key,byte[]) [function] [call site] 00112
6 [org.keycloak.crypto.fips.FIPS1402Provider].getAesGcmCipher() [function] [call site] 00113
6 [org.keycloak.crypto.elytron.WildFlyElytronProvider].getAesGcmCipher() [function] [call site] 00114
6 [org.keycloak.crypto.def.DefaultCryptoProvider].getAesGcmCipher() [function] [call site] 00115
6 [org.keycloak.common.crypto.CryptoIntegration].getProvider() [function] [call site] 00116
5 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].getAuthenticationTag(byte[]) [function] [call site] 00117
5 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].getEncryptedContent(byte[]) [function] [call site] 00118
5 [org.keycloak.jose.jwe.JWE].setEncryptedContentInfo(byte[],byte[],byte[]) [function] [call site] 00119
4 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].encodeJwe(org.keycloak.jose.jwe.JWE) [function] [call site] 00120
5 [org.keycloak.jose.jwe.JWE].getContent() [function] [call site] 00121
5 [org.keycloak.jose.jwe.JWEUtils].generateSecret(int) [function] [call site] 00122
5 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00123
5 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00124
5 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00125
5 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00126
5 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes128CbcHmacSha256Provider].getExpectedAesKeyLength() [function] [call site] 00127
5 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].encryptBytes(byte[],byte[],java.security.Key) [function] [call site] 00128
6 [org.keycloak.crypto.fips.FIPS1402Provider].getAesCbcCipher() [function] [call site] 00129
6 [org.keycloak.crypto.def.DefaultCryptoProvider].getAesCbcCipher() [function] [call site] 00130
6 [org.keycloak.crypto.elytron.WildFlyElytronProvider].getAesCbcCipher() [function] [call site] 00131
6 [org.keycloak.common.crypto.CryptoIntegration].getProvider() [function] [call site] 00132
5 [org.keycloak.jose.jwe.JWE].getBase64Header() [function] [call site] 00133
5 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].computeAuthenticationTag(byte[],byte[],byte[],java.security.Key) [function] [call site] 00134
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes256CbcHmacSha512Provider].getHmacShaAlgorithm() [function] [call site] 00135
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes192CbcHmacSha384Provider].getHmacShaAlgorithm() [function] [call site] 00136
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaJWEEncryptionProvider].getHmacShaAlgorithm() [function] [call site] 00137
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes128CbcHmacSha256Provider].getHmacShaAlgorithm() [function] [call site] 00138
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes128CbcHmacSha256Provider].getAuthenticationTagLength() [function] [call site] 00139
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes256CbcHmacSha512Provider].getAuthenticationTagLength() [function] [call site] 00140
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaJWEEncryptionProvider].getAuthenticationTagLength() [function] [call site] 00141
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes192CbcHmacSha384Provider].getAuthenticationTagLength() [function] [call site] 00142
5 [org.keycloak.jose.jwe.JWE].setEncryptedContentInfo(byte[],byte[],byte[]) [function] [call site] 00143
4 [org.keycloak.jose.jwe.JWE].getEncodedJweString() [function] [call site] 00144
5 [org.keycloak.common.util.Base64Url].encode(byte[]) [function] [call site] 00145
5 [org.keycloak.common.util.Base64Url].encode(byte[]) [function] [call site] 00146
5 [org.keycloak.common.util.Base64Url].encode(byte[]) [function] [call site] 00147
4 [org.keycloak.jose.jwe.JWEException]. (java.lang.Throwable) [function] [call site] 00148
3 [org.keycloak.jose.jwe.JWERegistry].getAlgProvider(java.lang.String) [function] [call site] 00149
4 [org.keycloak.jose.jwe.alg.DirectAlgorithmProvider]. () [function] [call site] 00150
4 [org.keycloak.crypto.def.DefaultCryptoProvider].getAlgorithmProvider(java.lang.Class,java.lang.String) [function] [call site] 00151
4 [org.keycloak.crypto.elytron.WildFlyElytronProvider].getAlgorithmProvider(java.lang.Class,java.lang.String) [function] [call site] 00152
4 [org.keycloak.crypto.fips.FIPS1402Provider].getAlgorithmProvider(java.lang.Class,java.lang.String) [function] [call site] 00153
4 [org.keycloak.common.crypto.CryptoIntegration].getProvider() [function] [call site] 00154
3 [org.keycloak.jose.jwe.JWEHeader].getAlgorithm() [function] [call site] 00155
3 [org.keycloak.jose.jwe.JWERegistry].getEncProvider(java.lang.String) [function] [call site] 00156
3 [org.keycloak.jose.jwe.JWEHeader].getEncryptionAlgorithm() [function] [call site] 00157
3 [org.keycloak.jose.jwe.JWEException]. (java.lang.Throwable) [function] [call site] 00158
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsString() [function] [call site] 00159
1 [org.keycloak.util.TokenUtil].jweDirectVerifyAndDecode(java.security.Key,java.security.Key,java.lang.String) [function] [call site] 00160
2 [org.keycloak.jose.jwe.JWE]. () [function] [call site] 00161
2 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00162
2 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00163
2 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00164
2 [org.keycloak.jose.jwe.JWE].verifyAndDecodeJwe(java.lang.String) [function] [call site] 00165
3 [org.keycloak.jose.jwe.JWE].setupJWEHeader(java.lang.String) [function] [call site] 00166
4 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00167
4 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00168
4 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00169
4 [org.keycloak.jose.jwe.JWE].getHeader() [function] [call site] 00170
5 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00171
5 [org.keycloak.util.JsonSerialization].readValue(byte[],java.lang.Class) [function] [call site] 00172
3 [org.keycloak.jose.jwe.JWE].verifyAndDecodeJwe() [function] [call site] 00173
4 [org.keycloak.jose.jwe.JWERegistry].getAlgProvider(java.lang.String) [function] [call site] 00174
4 [org.keycloak.jose.jwe.JWEHeader].getAlgorithm() [function] [call site] 00175
4 [org.keycloak.jose.jwe.JWERegistry].getEncProvider(java.lang.String) [function] [call site] 00176
4 [org.keycloak.jose.jwe.JWEHeader].getEncryptionAlgorithm() [function] [call site] 00177
4 [org.keycloak.jose.jwe.JWE].getProcessedJWE(org.keycloak.jose.jwe.alg.JWEAlgorithmProvider,org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00178
5 [org.keycloak.jose.jwe.JWEKeyStorage].setEncryptionProvider(org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00179
5 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00180
5 [org.keycloak.crypto.fips.FIPSAesKeyWrapAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00181
6 [org.bouncycastle.crypto.SymmetricSecretKey]. (org.bouncycastle.crypto.Parameters,byte[]) [function] [call site] 00182
6 [org.bouncycastle.crypto.fips.FipsAES$KeyWrapOperatorFactory]. () [function] [call site] 00183
5 [org.keycloak.crypto.fips.FIPSRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00184
6 [org.bouncycastle.crypto.asymmetric.AsymmetricRSAPrivateKey]. (org.bouncycastle.crypto.Algorithm,byte[]) [function] [call site] 00185
6 [org.bouncycastle.crypto.fips.FipsRSA$KeyWrapOperatorFactory]. () [function] [call site] 00186
5 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00187
6 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].getCipherProvider() [function] [call site] 00188
6 [org.keycloak.crypto.def.DefaultRsaKeyEncryption256JWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00189
6 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00190
5 [org.keycloak.crypto.elytron.AesKeyWrapAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00191
5 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00192
6 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].getCipherProvider() [function] [call site] 00193
6 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00194
6 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryption256JWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00195
5 [org.keycloak.crypto.def.AesKeyWrapAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00196
6 [org.bouncycastle.crypto.engines.AESWrapEngine]. () [function] [call site] 00197
6 [org.bouncycastle.crypto.params.KeyParameter]. (byte[]) [function] [call site] 00198
5 [org.keycloak.jose.jwe.alg.DirectAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00199
5 [org.keycloak.jose.jwe.JWEKeyStorage].getDecryptionKey() [function] [call site] 00200
5 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKBytes(byte[]) [function] [call site] 00201
5 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].verifyAndDecodeJwe(org.keycloak.jose.jwe.JWE) [function] [call site] 00202
6 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00203
6 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00204
6 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00205
6 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00206
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes128CbcHmacSha256Provider].getExpectedAesKeyLength() [function] [call site] 00207
6 [org.keycloak.jose.jwe.JWE].getBase64Header() [function] [call site] 00208
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].computeAuthenticationTag(byte[],byte[],byte[],java.security.Key) [function] [call site] 00209
6 [org.keycloak.jose.jwe.JWE].getEncryptedContent() [function] [call site] 00210
6 [org.keycloak.jose.jwe.JWE].getInitializationVector() [function] [call site] 00211
6 [org.keycloak.jose.jwe.JWE].getAuthenticationTag() [function] [call site] 00212
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].decryptBytes(byte[],byte[],java.security.Key) [function] [call site] 00213
7 [org.keycloak.crypto.fips.FIPS1402Provider].getAesCbcCipher() [function] [call site] 00214
7 [org.keycloak.crypto.def.DefaultCryptoProvider].getAesCbcCipher() [function] [call site] 00215
7 [org.keycloak.crypto.elytron.WildFlyElytronProvider].getAesCbcCipher() [function] [call site] 00216
7 [org.keycloak.common.crypto.CryptoIntegration].getProvider() [function] [call site] 00217
6 [org.keycloak.jose.jwe.JWE].getEncryptedContent() [function] [call site] 00218
6 [org.keycloak.jose.jwe.JWE].getInitializationVector() [function] [call site] 00219
6 [org.keycloak.jose.jwe.JWE].content(byte[]) [function] [call site] 00220
5 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].verifyAndDecodeJwe(org.keycloak.jose.jwe.JWE) [function] [call site] 00221
6 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00222
6 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00223
6 [org.keycloak.jose.jwe.enc.AesGcmJWEEncryptionProvider].getExpectedAesKeyLength() [function] [call site] 00224
6 [org.keycloak.jose.jwe.JWE].getBase64Header() [function] [call site] 00225
6 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].getAeadDecryptedTargetContent(org.keycloak.jose.jwe.JWE) [function] [call site] 00226
7 [org.keycloak.jose.jwe.JWE].getEncryptedContent() [function] [call site] 00227
7 [org.keycloak.jose.jwe.JWE].getAuthenticationTag() [function] [call site] 00228
6 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].decryptBytes(byte[],byte[],java.security.Key,byte[]) [function] [call site] 00229
7 [org.keycloak.crypto.fips.FIPS1402Provider].getAesGcmCipher() [function] [call site] 00230
7 [org.keycloak.crypto.elytron.WildFlyElytronProvider].getAesGcmCipher() [function] [call site] 00231
7 [org.keycloak.crypto.def.DefaultCryptoProvider].getAesGcmCipher() [function] [call site] 00232
7 [org.keycloak.common.crypto.CryptoIntegration].getProvider() [function] [call site] 00233
6 [org.keycloak.jose.jwe.JWE].getInitializationVector() [function] [call site] 00234
6 [org.keycloak.jose.jwe.JWE].content(byte[]) [function] [call site] 00235
4 [org.keycloak.jose.jwe.JWEException]. (java.lang.Throwable) [function] [call site] 00236
3 [org.keycloak.jose.jwe.JWEException]. (java.lang.Throwable) [function] [call site] 00237
2 [org.keycloak.jose.jwe.JWE].getContent() [function] [call site] 00238
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsString() [function] [call site] 00239
1 [org.keycloak.util.TokenUtil].jweKeyEncryptionVerifyAndDecode(java.security.Key,java.lang.String) [function] [call site] 00240
2 [org.keycloak.jose.jwe.JWE]. () [function] [call site] 00241
2 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00242
2 [org.keycloak.jose.jwe.JWEKeyStorage].setDecryptionKey(java.security.Key) [function] [call site] 00243
2 [org.keycloak.jose.jwe.JWE].verifyAndDecodeJwe(java.lang.String) [function] [call site] 00244
2 [org.keycloak.jose.jwe.JWE].getContent() [function] [call site] 00245
1 [org.keycloak.jose.jwe.alg.DirectAlgorithmProvider]. () [function] [call site] 00246
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeBoolean() [function] [call site] 00247
1 [org.keycloak.jose.jwe.enc.AesCbcHmacShaJWEEncryptionProvider]. (java.lang.String) [function] [call site] 00248
2 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider]. () [function] [call site] 00249
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].pickValue(java.lang.Object[]) [function] [call site] 00250
1 [org.keycloak.jose.jwe.enc.AesGcmJWEEncryptionProvider]. (java.lang.String) [function] [call site] 00251
2 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider]. () [function] [call site] 00252
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].pickValue(java.lang.Object[]) [function] [call site] 00253
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeBoolean() [function] [call site] 00254
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].pickValue(java.lang.Object[]) [function] [call site] 00255
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].pickValue(java.lang.Object[]) [function] [call site] 00256
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeString(int) [function] [call site] 00257
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].remainingBytes() [function] [call site] 00258
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsBytes() [function] [call site] 00259
1 [org.keycloak.util.TokenUtil].jweKeyEncryptionEncode(java.security.Key,byte[],java.lang.String,java.lang.String,java.lang.String,org.keycloak.jose.jwe.alg.JWEAlgorithmProvider,org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00260
2 [org.keycloak.util.TokenUtil].jweKeyEncryptionEncode(java.security.Key,byte[],java.lang.String,java.lang.String,java.lang.String,org.keycloak.jose.jwe.alg.JWEAlgorithmProvider,org.keycloak.jose.jwe.enc.JWEEncryptionProvider,java.lang.String) [function] [call site] 00261
3 [org.keycloak.jose.jwe.JWEHeader]. (java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String) [function] [call site] 00262
3 [org.keycloak.util.TokenUtil].jweKeyEncryptionEncode(java.security.Key,byte[],org.keycloak.jose.jwe.JWEHeader,org.keycloak.jose.jwe.alg.JWEAlgorithmProvider,org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00263
4 [org.keycloak.jose.jwe.JWE]. () [function] [call site] 00264
4 [org.keycloak.jose.jwe.JWE].header(org.keycloak.jose.jwe.JWEHeader) [function] [call site] 00265
4 [org.keycloak.jose.jwe.JWE].content(byte[]) [function] [call site] 00266
4 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00267
4 [org.keycloak.jose.jwe.JWEKeyStorage].setEncryptionKey(java.security.Key) [function] [call site] 00268
4 [org.keycloak.jose.jwe.JWE].encodeJwe(org.keycloak.jose.jwe.alg.JWEAlgorithmProvider,org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00269
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsString() [function] [call site] 00270
1 [org.keycloak.util.TokenUtil].jweKeyEncryptionVerifyAndDecode(java.security.Key,java.lang.String,org.keycloak.jose.jwe.alg.JWEAlgorithmProvider,org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00271
2 [org.keycloak.jose.jwe.JWE]. () [function] [call site] 00272
2 [org.keycloak.jose.jwe.JWE].getKeyStorage() [function] [call site] 00273
2 [org.keycloak.jose.jwe.JWEKeyStorage].setDecryptionKey(java.security.Key) [function] [call site] 00274
2 [org.keycloak.jose.jwe.JWE].verifyAndDecodeJwe(java.lang.String,org.keycloak.jose.jwe.alg.JWEAlgorithmProvider,org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00275
3 [org.keycloak.jose.jwe.JWE].setupJWEHeader(java.lang.String) [function] [call site] 00276
3 [org.keycloak.jose.jwe.JWE].getProcessedJWE(org.keycloak.jose.jwe.alg.JWEAlgorithmProvider,org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00277
3 [org.keycloak.jose.jwe.JWEException]. (java.lang.Throwable) [function] [call site] 00278
2 [org.keycloak.jose.jwe.JWE].getContent() [function] [call site] 00279