RFR: 8311902: Concurrency regression in the PBKDF2 key impl of SunJCE provider
Xue-Lei Andrew Fan
xuelei at openjdk.org
Fri Jul 14 02:40:02 UTC 2023
On Thu, 13 Jul 2023 21:01:06 GMT, Valerie Peng <valeriep at openjdk.org> wrote:
> > It looks good to me to rollback to previous behaviors. I was just wondering, if the use of key in other methods, like hashCode()/equals(), has the similar issue? Thanks!
>
> For the usage of hashCode()/equals(), there should be strong reference to the key object for the usage scenarios I'd think. Thus, probably not an issue?
Yes, it makes sense to me.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/14859#issuecomment-1635180918
More information about the security-dev
mailing list