-
Sub-task
-
Resolution: Delivered
-
P4
-
21
When initializing the DH `KeyPairGenerator` implementation of the SunPKCS11 provider with the `keysize` argument, it looks up the default DH parameters, including the default private exponent length used by other JDK providers, to initialize the underlying native PKCS11 implementation. If the `KeyPairGenerator` implementation is initialized with the `DHParameterSpec` object having a negative private exponent length, this invalid negative value will also be overridden with a default value matching the DH prime size.