Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8320449

ECDHKeyAgreement should validate parameters before using them

XMLWordPrintable

    • b06
    • Verified

      When using ECDH with KeyAgreement, if the application ignores that doPhase() threw an exception, generateSecret() will still make a key. The key will be invalid causing the calling application to fail.

      In the code, doPhase() should not set the class variable for the public key on failure.

            jjiang John Jiang
            ascarpino Anthony Scarpino
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: