title: How to decrypt LTPA token version 2
body: <p>I'm working on project which is required SSO implementation between WebShpere and PHP web application.</p>
  
  <p>However after i take a look at possible ways to implement SSO i find the LTPA token which is used to implement SSO between different IBM technologies. </p>
  
  <p>but LTPA token 2 is encrypted cookie file. which i should decrypt if i want to use information inside this file such as (userid, username, email ... etc).</p>
  
  <p>i have make deep search about LTPA token 2 and below is the best definition i find from IBM.</p>
  
  <blockquote>
    <p>LTPA2 signatures are generated using SHA-1 as the hash algorithm, and
    RSA (1024-bit key) as the encryption algorithm. After the digital
    signature has been attached, the user data and signature are encrypted
    with a 3DES or AES key obtained from the LTPA key file (refer to
    “Consuming LTPA tokens” and “Generating LTPA tokens”).</p>
  </blockquote>
  
  <p>But i'm still trying to decrypt this token with no luck.</p>
  
  <p>Any help ? </p>