Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8212669

Add note to Cipher javadoc about using full transformation and not relying on defaults

    Details

    • Subcomponent:
    • Resolved In Build:
      b19
    • Verification:
      Not verified

      Description

      The following was added to the JDK Providers Guide regarding the Cipher transformation defaults:

      "If the mode/padding are omitted, the SunJCE and SunPKCS11 providers use ECB as the default mode and PKCS5Padding as the default padding for many symmetric ciphers.

      It is recommended to use transformations that fully specify the algorithm, mode, and padding instead of relying on the defaults. The defaults are provider specific and can vary among providers."

      That recommendation (or something similar) should also be included in the Cipher javadoc.

        Attachments

          Activity

            People

            • Assignee:
              mullan Sean Mullan
              Reporter:
              mullan Sean Mullan
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: