ECDHKeyAgreement should validate parameters before using them

XMLWordPrintable

    • b06
    • Verified

      When using ECDH with KeyAgreement, if the application ignores that doPhase() threw an exception, generateSecret() will still make a key. The key will be invalid causing the calling application to fail.

      In the code, doPhase() should not set the class variable for the public key on failure.

            Assignee:
            John Jiang
            Reporter:
            Anthony Scarpino
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: