RFR: 8296442: EncryptedPrivateKeyInfo can be created with an uninitialized AlgorithmParameters [v3]
Weijun Wang
weijun at openjdk.org
Tue Nov 15 21:56:39 UTC 2022
On Tue, 15 Nov 2022 21:48:54 GMT, Sean Mullan <mullan at openjdk.org> wrote:
>> The only left caller is `EncryptedPrivateKeyInfo`. If new callers start using this constructor, this will be the expected behavior. The message can be enhanced a little since there could be other reasons. (Ex: `PSSParameters` with unknown hash algorithms).
>
> Would it be more correct to change the message to "AlgorithmParameters are not initialized or cannot be decoded"?
Yes, that's more precise.
-------------
PR: https://git.openjdk.org/jdk/pull/11067
More information about the security-dev
mailing list