RFR: 8302225: SunJCE Provider doesn't validate key sizes when using 'constrained' transforms for AES/KW and AES/KWP [v2]
Goetz Lindenmaier
goetz at openjdk.org
Mon Nov 18 10:24:12 UTC 2024
On Thu, 16 Feb 2023 01:30:49 GMT, Valerie Peng <valeriep at openjdk.org> wrote:
>> Due to an error in the existing regression test, this bug remain undiscovered until now. Added the key size check to the KeyWrapCipher class and fixed the regression test.
>>
>> Please help review this trivial fix.
>>
>> Thanks in advance,
>> Valerie
>
> Valerie Peng has updated the pull request incrementally with one additional commit since the last revision:
>
> Refactor to address review comments
Thanks for the advice!
-------------
PR Comment: https://git.openjdk.org/jdk/pull/12569#issuecomment-2482585726
More information about the security-dev
mailing list