[11u] RFR (S): 8226880: Backport of JDK-8208698 (Improved ECC Implementation) should not bring parts of JDK-8205476 (KeyAgreement#generateSecret is not reset for ECDH based algorithm)

[Langer, Christoph]

Thanks, pushed.

> -----Original Message-----
> From: Andrew John Hughes <gnu.andrew at redhat.com>
> Sent: Donnerstag, 27. Juni 2019 18:45
> To: Langer, Christoph <christoph.langer at sap.com>; jdk-updates-
> dev at openjdk.java.net
> Cc: security-dev <security-dev at openjdk.java.net>
> Subject: Re: [11u] RFR (S): 8226880: Backport of JDK-8208698 (Improved ECC
> Implementation) should not bring parts of JDK-8205476
> (KeyAgreement#generateSecret is not reset for ECDH based algorithm)
> 
> 
> 
> On 27/06/2019 11:12, Langer, Christoph wrote:
> > Hi,
> >
> >
> >
> > I made a mistake when bringing JDK-8226880 to 11u. The patch introduced
> > coding of JDK-8205476 that should not be there. Here is a patch to fix this.
> >
> >
> >
> > Bug: https://bugs.openjdk.java.net/browse/JDK-8226880
> >
> > Webrev: http://cr.openjdk.java.net/~clanger/webrevs/8226880.11u.0/
> >
> >
> >
> > As the backport is in 11.0.4, this fix needs to be applied there during
> > closed rampdown.
> >
> >
> >
> > Thanks
> >
> > Christoph
> >
> >
> >
> 
> Looks good to me.
> 
> Thanks,
> --
> Andrew :)
> 
> Senior Free Java Software Engineer
> Red Hat, Inc. (http://www.redhat.com)
> 
> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
> https://keybase.io/gnu_andrew