RFR: 8296442: EncryptedPrivateKeyInfo can be created with an uninitialized AlgorithmParameters [v3]

Weijun Wang weijun at openjdk.org
Tue Nov 15 21:56:39 UTC 2022


On Tue, 15 Nov 2022 21:48:54 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> The only left caller is `EncryptedPrivateKeyInfo`. If new callers start using this constructor, this will be the expected behavior. The message can be enhanced a little since there could be other reasons. (Ex: `PSSParameters` with unknown hash algorithms).
>
> Would it be more correct to change the message to "AlgorithmParameters are not initialized or cannot be decoded"?

Yes, that's more precise.

-------------

PR: https://git.openjdk.org/jdk/pull/11067



More information about the security-dev mailing list