[jdk25u-dev] RFR: 8358159: Empty mode/padding in cipher transformations
Goetz Lindenmaier
goetz at openjdk.org
Sun Dec 21 17:45:01 UTC 2025
On Tue, 16 Dec 2025 20:08:16 GMT, Roland Mesde <duke at openjdk.org> wrote:
> Backporting JDK-8358159: Empty mode/padding in cipher transformations.
>
> Cipher transformation strings with empty mode or padding components (e.g., "AES/ /NoPadding") incorrectly throw
> NoSuchAlgorithmException instead of being processed normally. This commit fixes the issue by treating empty mode or padding strings as null values during transformation parsing.
>
> For parity with Oracle JDK.
>
> Ran related tests on linux-x64, linux-aarch64, macos-aarch64 and windows-x64:
>
> (Passed) - make test TEST=test/jdk/javax/crypto
>
> Results attached:
> [linux-aarch64-specific-2-test.log](https://github.com/user-attachments/files/24200380/linux-aarch64-specific-2-test.log)
> [linux-x64-specific-2-test.log](https://github.com/user-attachments/files/24200381/linux-x64-specific-2-test.log)
> [macos-aarch64-specific-2-test.log](https://github.com/user-attachments/files/24200382/macos-aarch64-specific-2-test.log)
> [windows-x64-specific-2-test.log](https://github.com/user-attachments/files/24200383/windows-x64-specific-2-test.log)
Hi @rm-gh-8 ,
can you please do a dependend backport with [JDK-8369790](https://bugs.openjdk.org/browse/JDK-8369790) Stricter checking for cipher transformations ? Pushing these timely will avoid intermediate test errors.
Do a
git checkout origin/pr/95
and then
git checkout -b my_backport_8369790 or similar and prepare the backport of 8369790.
In the PR for 8369790 you must choose branch pr/95 for comparison. This should assure skara accepts the backport as clean.
Thanks!
Goetz.
-------------
PR Comment: https://git.openjdk.org/jdk25u-dev/pull/95#issuecomment-3679168367
More information about the jdk-updates-dev
mailing list