Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8212669

Add note to Cipher javadoc about using full transformation and not relying on defaults

XMLWordPrintable

    • b19
    • Not verified

      The following was added to the JDK Providers Guide regarding the Cipher transformation defaults:

      "If the mode/padding are omitted, the SunJCE and SunPKCS11 providers use ECB as the default mode and PKCS5Padding as the default padding for many symmetric ciphers.

      It is recommended to use transformations that fully specify the algorithm, mode, and padding instead of relying on the defaults. The defaults are provider specific and can vary among providers."

      That recommendation (or something similar) should also be included in the Cipher javadoc.

            mullan Sean Mullan
            mullan Sean Mullan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: