RFR[9] 8062731: Cipher object can be created without calling Cipher.getInstance
Bradford Wetmore
bradford.wetmore at oracle.com
Thu Jan 26 01:15:57 UTC 2017
Looks ok.
One minor nit:
258: indention problem.
Brad
On 1/23/2017 12:28 PM, Valerie Peng wrote:
> Hi Brad,
>
> Would you have time to review this? I changed the code to base the trust
> decision on the immediate caller of Cipher(CipherSpi, Provider, String).
> In addition, the specified Provider object is only taken into account
> when it shares the same origin (codebase or module) with the caller.
>
> Webrev: http://cr.openjdk.java.net/~valeriep/8062731/webrev.00/
>
> Thanks,
>
> Valerie
>
More information about the security-dev
mailing list