Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8176837

SunPKCS11 provider needs to check more details on PKCS11 Mechanism

    Details

    • Subcomponent:
    • Resolved In Build:
      b16
    • CPU:
      generic
    • OS:
      generic
    • Verification:
      Not verified

      Backports

        Description

        Currently, SunPKCS11 provider assumes the listed supported mechanism can be used fully, i.e. cipher mechanisms can perform both encrypt and decrypt operations, signature mechanisms can perform both signing and verification. This may be true initially, however, as mechanisms become weak or obsolete, this may not hold true anymore.
        One example, in S11.4, RC4 can no longer be used for encryption. However, it still shows up as supported mechanism which supports decryption for older applications. SunPKCS11 provider needs to be updated accordingly,

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  valeriep Valerie Peng
                  Reporter:
                  valeriep Valerie Peng
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  7 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: