It's a default paramenter in the code, here:

• pysaml2/src/saml2/sigver.py

  Line 1243 in a9a4fe9

  class SecurityContext(object):

• pysaml2/src/saml2/sigver.py

  Line 757 in a9a4fe9

  def encrypt_assertion(self, statement, enc_key, template, key_type='des-192', node_xpath=None, node_id=None):

I think that we could use an option in the general configuration to handle this behaviour.

consider also the enc template
https://github.com/IdentityPython/pysaml2/blob/master/src/saml2/data/templates/template_enc.xml

So does the code even support AES ? will changing key_type from des-192 to say AES-128 work? @peppelinux

Try It, go ahead and share results, we can work on a pull request for that

I agree that we should review this and change it (or make it configurable)

@c00kiemon5ter / @peppelinux do you have any plans considering this issue?

I don't have any updates, formerly we should assign this issue to a developer and this should present a PR. Is there any candidates?

Hope to talk about this during the next idpy call, thank you melanger for having pointed out this