broken SSA-224 in jdk7u111?

[Andrew Hughes]

----- Original Message -----
> ----- Original Message -----
> > At Google we've merged jdk7u111 into our jdk7 repo, and we're seeing some
> > jtreg failures.
> > 
> > These 10 stand out collectively:
> > 
> >   com/sun/crypto/provider/Cipher/RSA/TestOAEP.java
> >   com/sun/crypto/provider/Cipher/RSA/TestOAEPWithParams.java
> >   com/sun/crypto/provider/Mac/MacClone.java
> >   com/sun/crypto/provider/Mac/MacKAT.java
> >   sun/security/provider/DSA/TestAlgParameterGenerator.java
> >   sun/security/provider/MessageDigest/DigestKAT.java
> >   sun/security/provider/MessageDigest/Offsets.java
> >   sun/security/provider/MessageDigest/TestSHAClone.java
> >   sun/security/rsa/TestKeyPairGenerator.java
> >   sun/security/rsa/TestSignatures.java
> > 
> > We believe that the cause of these failures is that the fix for JDK-8000897
> > is missing, which is needed for SHA-224 to work.
> > 
> > I don't see the patch in the jdk7u repo, but it can be found in the old
> > icedtea 2.6 forest.
> > 
> > Compare:
> > 
> > http://icedtea.classpath.org/hg/release/icedtea7-forest-2.6/jdk/log/78984f240864/src/share/classes/sun/security/provider/SHA2.java
> > to:
> > 
> > http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/log/3d030fe77f74/src/share/classes/sun/security/provider/SHA2.java
> > 
> > Are we missing something?
> > 
> 
> No. There's nothing 'old' about the 2.6 or any IcedTea forest. These
> are still the basis for distribution packages, especially as they have
> PPC64 and AArch64 ports for 7.
> 
> We are moving things upstream into OpenJDK 7 now we have better access,
> but this isn't complete yet. I'll look at getting this patch moved up.
> --
> Andrew :)
> 
> Senior Free Java Software Engineer
> Red Hat, Inc. (http://www.redhat.com)
> 
> PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
> Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
> 
> 
> 

This fix is included in 7u121 b00:

http://mail.openjdk.java.net/pipermail/jdk7u-dev/2016-November/010653.html
-- 
Andrew :)

Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222