getParams() for XECKey returns nonsense

Sean Mullan sean.mullan at oracle.com
Wed Sep 9 14:46:36 UTC 2020


On 9/9/20 1:16 AM, Anders Rundgren wrote:
> I may (surely) be wrong but changing the API to return
> NamedParameterSpec should not break any existing code based on the
> Oracle provider.

Whether it continues to work when someone is using a specific provider 
is not relevant. This is a Java SE API, and must work independent of any 
particular implementation.

It's an incompatible change. Code such as the following would break:

AlgorithmParameterSpec params = XECKey.getParams();

The way to address this would be to add another method to XECKey that 
returns a NamedParameterSpec. We could consider this as an Enhancement 
request.

--Sean



More information about the security-dev mailing list