Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8176837

SunPKCS11 provider needs to check more details on PKCS11 Mechanism

    XMLWordPrintable

Details

    • b16
    • generic
    • generic
    • Not verified

    Backports

      Description

        Currently, SunPKCS11 provider assumes the listed supported mechanism can be used fully, i.e. cipher mechanisms can perform both encrypt and decrypt operations, signature mechanisms can perform both signing and verification. This may be true initially, however, as mechanisms become weak or obsolete, this may not hold true anymore.
        One example, in S11.4, RC4 can no longer be used for encryption. However, it still shows up as supported mechanism which supports decryption for older applications. SunPKCS11 provider needs to be updated accordingly,

        Attachments

          Issue Links

            Activity

              People

                valeriep Valerie Peng
                valeriep Valerie Peng
                Votes:
                0 Vote for this issue
                Watchers:
                8 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: