RFR: 8311902: Concurrency regression in the PBKDF2 key impl of SunJCE provider

Xue-Lei Andrew Fan xuelei at openjdk.org
Fri Jul 14 02:40:02 UTC 2023


On Thu, 13 Jul 2023 21:01:06 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

> > It looks good to me to rollback to previous behaviors. I was just wondering, if the use of key in other methods, like hashCode()/equals(), has the similar issue? Thanks!
> 
> For the usage of hashCode()/equals(), there should be strong reference to the key object for the usage scenarios I'd think. Thus, probably not an issue?

Yes, it makes sense to me.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/14859#issuecomment-1635180918


More information about the security-dev mailing list