-
Type:
Sub-task
-
Resolution: Delivered
-
Priority:
P4
-
Affects Version/s: 21
-
Component/s: security-libs
When initializing the DH `KeyPairGenerator` implementation of the SunPKCS11 provider with the `keysize` argument, it looks up the default DH parameters, including the default private exponent length used by other JDK providers, to initialize the underlying native PKCS11 implementation. If the `KeyPairGenerator` implementation is initialized with the `DHParameterSpec` object having a negative private exponent length, this invalid negative value will also be overridden with a default value matching the DH prime size.