RFR 8071643: sun.security.krb5.KrbApReq.authenticate() is not thread safe

Weijun Wang weijun.wang at oracle.com
Mon Feb 2 13:47:36 UTC 2015

Hi All

Please review the code change at


The static field is removed and a local MessageDigest is used. The 
getInstance() method might spend some time but since there are already 
quite some cipher and checksum operations during an AP-REQ receive, this 
change does not make much difference.

No reg, could be -hard and -trivial.


More information about the security-dev mailing list