RFR[9] 8062731: Cipher object can be created without calling Cipher.getInstance

Bradford Wetmore bradford.wetmore at oracle.com
Thu Jan 26 01:15:57 UTC 2017

Looks ok.

One minor nit:

258:  indention problem.


On 1/23/2017 12:28 PM, Valerie Peng wrote:
> Hi Brad,
> Would you have time to review this? I changed the code to base the trust
> decision on the immediate caller of Cipher(CipherSpi, Provider, String).
> In addition, the specified Provider object is only taken into account
> when it shares the same origin (codebase or module) with the caller.
> Webrev: http://cr.openjdk.java.net/~valeriep/8062731/webrev.00/
> Thanks,
> Valerie

More information about the security-dev mailing list