RFR: 8302225: SunJCE Provider doesn't validate key sizes when using 'constrained' transforms for AES/KW and AES/KWP [v2]

Goetz Lindenmaier goetz at openjdk.org
Mon Nov 11 11:41:03 UTC 2024


On Thu, 16 Feb 2023 21:57:31 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

>> Looks good to me.  Thanks!
>
>> Looks good to me. Thanks!
> 
> Thanks for the review~

Hi @valeriepeng, @XueleiFan,
this looks like a fix that should go to 17. Do you think it's a good idea to backport it?  I'd address this if you agree.
Best regards, Goetz.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/12569#issuecomment-2467959885


More information about the security-dev mailing list