getParams() for XECKey returns nonsense
Sean Mullan
sean.mullan at oracle.com
Wed Sep 9 14:46:36 UTC 2020
On 9/9/20 1:16 AM, Anders Rundgren wrote:
> I may (surely) be wrong but changing the API to return
> NamedParameterSpec should not break any existing code based on the
> Oracle provider.
Whether it continues to work when someone is using a specific provider
is not relevant. This is a Java SE API, and must work independent of any
particular implementation.
It's an incompatible change. Code such as the following would break:
AlgorithmParameterSpec params = XECKey.getParams();
The way to address this would be to add another method to XECKey that
returns a NamedParameterSpec. We could consider this as an Enhancement
request.
--Sean
More information about the security-dev
mailing list