RFR: 8358159: Empty mode/padding in cipher transformations [v5]
Valerie Peng
valeriep at openjdk.org
Thu Jun 12 20:51:38 UTC 2025
On Tue, 10 Jun 2025 08:17:29 GMT, Varada M <varadam at openjdk.org> wrote:
>> Varada M has updated the pull request incrementally with one additional commit since the last revision:
>>
>> 8358159: Empty mode/padding in cipher transformations
>
> Thanks all
@varada1110 After checking various javadoc, security documentation, and the comments in earlier JDK releases, I have second thought on allowing empty mode and/or padding. Even though not strictly enforced to be rejected, I think the intention is to specify cipher transformations ("algorithm" or "algorithm/mode/padding") which all present components are non-empty. I filed a separate issue https://bugs.openjdk.org/browse/JDK-8359388 to address this. Please do let me know if tightening this up would break how you use it.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/25547#issuecomment-2968117537
More information about the security-dev
mailing list