IJ27178: IBMJCEPLUS JAVA.SECURITY.PROVIDEREXCEPTION: FAILURE IN ENGINEDOFINAL

APAR status

• Closed as program error.

Error description

• Error Message: java.security.ProviderException: Failure in
  engineDoFinal
  .
  Stack Trace: <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089
  SystemErr R javax.crypto.AEADBadTagException:
  ICC_AES_GCM_En/DecryptFinal failed
  <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089 SystemErr R
   at
  com.ibm.crypto.plus.provider.AESGCMCipher.engineDoFinal(AESGCMCi
  pher.java:114)
  <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089 SystemErr R
   at javax.crypto.Cipher.doFinal(Unknown Source)
  <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089 SystemErr R
   at com.ibm.jsse2.n.a(n.java:34)
  <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089 SystemErr R
   at com.ibm.jsse2.b.a(b.java:96)
  <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R
   at com.ibm.jsse2.av.a(av.java:957)
  <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R
   at com.ibm.jsse2.av.a(av.java:513)
  <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R
   at com.ibm.jsse2.f.read(f.java:9)
  <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R
   at
  com.ibm.rmi.iiop.Connection.readMoreData(Connection.java:1781)
  <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R
   at
  com.ibm.rmi.iiop.Connection.createInputStream(Connection.java:15
  69)
  <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemErr R
   at
  com.ibm.rmi.iiop.Connection.doReaderWorkOnce(Connection.java:343
  9)
  <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemErr R
   at
  com.ibm.rmi.transport.ReaderThread.run(ReaderPoolImpl.java:131)
  <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemOut O
  ICC_AES_GCM_En/DecryptFinal failed
  <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemOut O
  Padded plaintext after DECRYPTION: len = 18
  <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemOut O
  0000: 02 50 9d ab bd 41 80 57 97 cd 6e 15 ba 0c 22 34
  .P...A.W..n...
  .
  

Local fix

• Use IBMJCE
  

Problem summary

• The problem was caused because the FastJNI output buffer was no
  taking into account the tag lenght.
  

Problem conclusion

• updated the code to create the needed buffer size.
  Austin APAR - IJ25832
  IBMJCEPlus build - build-20200728
  .
  This APAR will be fixed in the following Java Releases:
   8 SR6 FP25 (8.0.6.25)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels