Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8176837

SunPKCS11 provider needs to check more details on PKCS11 Mechanism

    XMLWordPrintable

    Details

    • Subcomponent:
    • Resolved In Build:
      b16
    • CPU:
      generic
    • OS:
      generic
    • Verification:
      Not verified

      Backports

        Description

        Currently, SunPKCS11 provider assumes the listed supported mechanism can be used fully, i.e. cipher mechanisms can perform both encrypt and decrypt operations, signature mechanisms can perform both signing and verification. This may be true initially, however, as mechanisms become weak or obsolete, this may not hold true anymore.
        One example, in S11.4, RC4 can no longer be used for encryption. However, it still shows up as supported mechanism which supports decryption for older applications. SunPKCS11 provider needs to be updated accordingly,

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                valeriep Valerie Peng
                Reporter:
                valeriep Valerie Peng
                Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: