-
Bug
-
Resolution: Fixed
-
P3
-
7u391, 8u60, 9
-
b99
-
solaris
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8306487 | 8u381 | Prajwal Kumaraswamy | P3 | Resolved | Fixed | b03 |
JDK-8308759 | 7u401 | Hari Rakesh | P3 | Resolved | Fixed | b01 |
Test case:
com/oracle/security/ucrypto/TestCICOWithGCMAndAAD.java
com/oracle/security/ucrypto/TestGCMKeyAndIvCheck.java
Exception:
com.oracle.security.ucrypto.UcryptoException: CRYPTO_MECHANISM_PARAM_INVALID
at com.oracle.security.ucrypto.NativeCipher.nativeInit(Native Method)
at com.oracle.security.ucrypto.NativeGCMCipher.init(NativeGCMCipher.java:139)
at com.oracle.security.ucrypto.NativeGCMCipher.engineInit(NativeGCMCipher.java:214)
at javax.crypto.Cipher.init(Cipher.java:1394)
at javax.crypto.Cipher.init(Cipher.java:1327)
at TestCICOWithGCMAndAAD.doTest(TestCICOWithGCMAndAAD.java:50)
Description:
Solaris disallows the all-zero IV for GCM mode, when the GCM mode parameter which is used as the initialization vector ("IV") is set to all zeros.
Code Sample:
GCMParameterSpec spec = new GCMParameterSpec(128, new byte[16]);
Cipher encCipher = Cipher.getInstance("AES/GCM/NoPadding", p);
encCipher.init(Cipher.ENCRYPT_MODE, key, spec);
com/oracle/security/ucrypto/TestCICOWithGCMAndAAD.java
com/oracle/security/ucrypto/TestGCMKeyAndIvCheck.java
Exception:
com.oracle.security.ucrypto.UcryptoException: CRYPTO_MECHANISM_PARAM_INVALID
at com.oracle.security.ucrypto.NativeCipher.nativeInit(Native Method)
at com.oracle.security.ucrypto.NativeGCMCipher.init(NativeGCMCipher.java:139)
at com.oracle.security.ucrypto.NativeGCMCipher.engineInit(NativeGCMCipher.java:214)
at javax.crypto.Cipher.init(Cipher.java:1394)
at javax.crypto.Cipher.init(Cipher.java:1327)
at TestCICOWithGCMAndAAD.doTest(TestCICOWithGCMAndAAD.java:50)
Description:
Solaris disallows the all-zero IV for GCM mode, when the GCM mode parameter which is used as the initialization vector ("IV") is set to all zeros.
Code Sample:
GCMParameterSpec spec = new GCMParameterSpec(128, new byte[16]);
Cipher encCipher = Cipher.getInstance("AES/GCM/NoPadding", p);
encCipher.init(Cipher.ENCRYPT_MODE, key, spec);
- backported by
-
JDK-8306487 CRYPTO_MECHANISM_PARAM_INVALID occurs if GCM mode parameter which is used as an IV is set to all zeros
-
- Resolved
-
-
JDK-8308759 CRYPTO_MECHANISM_PARAM_INVALID occurs if GCM mode parameter which is used as an IV is set to all zeros
-
- Resolved
-
- relates to
-
JDK-8129621 AES GCM on Solaris fails with zeros for an IV
-
- Closed
-