[jdk25u-dev] RFR: 8358159: Empty mode/padding in cipher transformations

[Roland Mesde]

On Sun, 21 Dec 2025 17:42:30 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

>> Backporting JDK-8358159: Empty mode/padding in cipher transformations.
>> 
>> Cipher transformation strings with empty mode or padding components (e.g., "AES/ /NoPadding") incorrectly throw 
>> NoSuchAlgorithmException instead of being processed normally. This commit fixes the issue by treating empty mode or padding strings as null values during transformation parsing.
>> 
>> For parity with Oracle JDK.
>> 
>> Ran related tests on linux-x64, linux-aarch64, macos-aarch64 and windows-x64:
>> 
>> (Passed) - make test TEST=test/jdk/javax/crypto
>> 
>> Results attached:
>> [linux-aarch64-specific-2-test.log](https://github.com/user-attachments/files/24200380/linux-aarch64-specific-2-test.log)
>> [linux-x64-specific-2-test.log](https://github.com/user-attachments/files/24200381/linux-x64-specific-2-test.log)
>> [macos-aarch64-specific-2-test.log](https://github.com/user-attachments/files/24200382/macos-aarch64-specific-2-test.log)
>> [windows-x64-specific-2-test.log](https://github.com/user-attachments/files/24200383/windows-x64-specific-2-test.log)
>
> Hi @rm-gh-8 ,
> can you please do a dependend backport with [JDK-8369790](https://bugs.openjdk.org/browse/JDK-8369790) Stricter checking for cipher transformations ?  Pushing these timely will avoid intermediate test errors.
> 
> Do a 
> git checkout origin/pr/95
> and then
> git checkout -b my_backport_8369790 or similar and prepare the backport of 8369790.
> 
> In the PR for 8369790 you must choose branch pr/95 for comparison. This should assure skara accepts the  backport as clean.
> 
> I removed the label in the meantime.
> 
> Thanks!
>   Goetz.

@GoeLin Create https://github.com/openjdk/jdk25u-dev/pull/130 to backport JDK-8359388 / JDK-8369790

-------------

PR Comment: https://git.openjdk.org/jdk25u-dev/pull/95#issuecomment-3711765217