Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8226651

Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no effect

XMLWordPrintable

        A DESCRIPTION OF THE PROBLEM :
        The constructor of the class sun.security.pkcs11.wrapper.CK_RSA_PKCS_PSS_PARAMS takes the hashAlg to get the MGF function. This should, however, be extracted from the mgfHash parameter.

        STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
        Read the source code block:

            public CK_RSA_PKCS_PSS_PARAMS(String hashAlg, String mgfAlg,
                    String mgfHash, int sLen) {
                this.hashAlg = Functions.getHashMechId(hashAlg);
                if (!mgfAlg.equals("MGF1")) {
                    throw new ProviderException("Only MGF1 is supported");
                }
                // no dash in PKCS#11 mechanism names
                this.mgf = Functions.getMGFId("CKG_MGF1_" + hashAlg.replaceFirst("-", ""));
                this.sLen = sLen;
        }


        FREQUENCY : always


              valeriep Valerie Peng
              webbuggrp Webbug Group
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: