Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8007934

algorithm parameters for PBE Scheme 2 not decoded correctly in PKCS12 keystore

    XMLWordPrintable

Details

    • b78
    • Verified

    Backports

      Description

        Private keys and secret keys are protected in PKCS #12 by means of a Password-based Encryption (PBE)
        algorithm. Several PBE algorithms are standardized in PKCS #12.

        Support for stronger PBE Scheme 2 (PBES2) algorithms was added to the implementation for PKCS12
        keystore. However decoding the algorithm parameters for PBES2 from ASN.1 DER is not handled correctly.

        The effect of this is that protection of crypto keys is limited to weaker PBE algorithms rather than the
        stronger PBES2 algorithms.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8266273 algorithm parameters for PBE Scheme 2 not decoded correctly in PKCS12 keystore

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8266512 algorithm parameters for PBE Scheme 2 not decoded correctly in PKCS12 keystore

            • P3 - Major loss of function.
            • Resolved

            Activity

              People

                vinnie Vincent Ryan
                vinnie Vincent Ryan
                Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: