Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6229618

Crypto permission lookup is wrong when the Cipher algorithm name is not all uppercase

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P3 P3
    • 6
    • 6
    • security-libs
    • None
    • beta
    • generic
    • generic

        Currently, JCE framework would convert all algorithm names to uppercases
        when parsing the jurisdiction policy file. However, Cipher class stores
        the user specified transformation directly and uses it to look up the
        granted crypto permission. This has not been an issue since most algorithm
        names in JCE are in uppercases by convention and has the same keysize
        limit as the default (wildcard) one.

        However, DESede has a mixed case name, thus the current JCE crypto
        permission lookup fails to find the right permission and use the
        default one instead.
        ###@###.### 2005-2-15 22:37:21 GMT

              valeriep Valerie Peng
              valeriep Valerie Peng
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: