Make AbstractDrbg non-Serializable

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: P4
    • 9
    • Affects Version/s: 9
    • Component/s: security-libs
    • None

      SecureRandomSpi is serializable and DRBG saves quite a lot of fields in its serialized form. If the serialized data is corrupted, unexpected error will occur when it's deserialized or used.

      We can make it simpler by only store the parameters in the serialized data. In fact, AbstractDrbg does not need to implement SecureRandomSpi at all.

            Assignee:
            Weijun Wang
            Reporter:
            Weijun Wang
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: