Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8368694

PKCS11-NSS generic keys generated by DH have leading zeroes stripped

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: P4 P4
    • None
    • 25, 26
    • security-libs
    • None

      JDK-8189441 extended the KeyAgreements to generate "Generic" keys. These keys are intended for use with KDFs, and are supposed to always use the full length.

      When using SunPKCS11 provider with NSS backend, Generic keys generated by DiffieHellman have their leading zeroes stripped.

      To reproduce, extend the existing test named TestLeadingZeroesP11 to cover Generic keys.

            djelinski Daniel Jelinski
            djelinski Daniel Jelinski
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: