[jdk17u-dev] Withdrawn: 8301793: AlgorithmId should not encode a missing parameters field as NULL unless hardcoded

duke duke at openjdk.org
Fri Aug 22 19:38:01 UTC 2025


On Mon, 2 Jun 2025 11:36:33 GMT, Varada M <varadam at openjdk.org> wrote:

> In the case of ML-KEM and ML-DSA keys there are no algorithm parameters. So, this code adds a NULL to the encoding when it shouldn't. The issue in jdk17 is when you are trying to compare keys to make sure that they are equal between providers. However, the equals method makes use of the encoding to do the compare which will fail.
> The fix for this was already there in JDK 21 and later.
> 
> The backport could not be done as a clean cherry-pick because I had manually remove the old logic that adds a NULL when the OID isn't in the list, and replaced it with equivalent behavior that only adds a NULL when required.

This pull request has been closed without being integrated.

-------------

PR: https://git.openjdk.org/jdk17u-dev/pull/3615


More information about the jdk-updates-dev mailing list