RFR 8156501: DRBG not synchronized at reseeding
Wang Weijun
weijun.wang at oracle.com
Mon May 9 03:51:13 UTC 2016
Hi All
Please review the fix at
http://cr.openjdk.java.net/~weijun/8156501/webrev.00
Many thanks to Siba for discovering this problem. I have only benchmarked nextBytes() before.
Some clarifications:
1. No need to synchronize configure anymore() because it's always called inside a constructor.
2. synchronized-between-double-check in engineNextBytes() to protect reseedCounter.
Thanks
Max
More information about the security-dev
mailing list