IJ52919: REUSING A PBE CIPHER INSTANCE WITHOUT PROVIDING ALGORITHMPARAMETERS THROWS INVALIDALGORITHMPARAMETEREXCEPTION

APAR status

• Closed as program error.

Error description

• Error Message: Unexpected error:
  java.security.InvalidKeyException:
  
  java.security.InvalidAlgorithmParameterException: Parameters
   missing
  .
  Stack Trace: Caused by:
  java.security.InvalidAlgorithmParameterException:
   Parameters missing at
  
  com.ibm.crypto.plus.provider.PBE2Cipher.engineInit(PBE2Cipher.ja
  va:111)
   at
  
  com.ibm.crypto.plus.provider.PBE2Cipher.engineInit(PBE2Cipher.ja
  va:192)
  .
  

Local fix

• Get the AlgorithmParameters from the Cipher instance after the
  first
   init call. Provide those AlgorithmParameters to the
  subsequent init
   calls.
  

Problem summary

• The problem is caused when an instance of a PBE2 cipher is
   initialized to encrypt and then the same instance is
  initialized
   again without providing the algorithm parameters.
  

Problem conclusion

• The PBE2 cipher has been corrected to use the algorithm
  parameters
   provided or generated during the first
  initialization of the
   instance when the same instance is initialized for
  decryption and no
   algorithm parameters.
   IBMJCEPlus.jar was updated so PBE2 cipher instances
  will use the
   initial algorithm parmeters during subsequent
  initializations when
   those parameters are not provided by the caller The
  associated
   Hursley RTC Problem Report is 151927 The associated
  Austin GIT
   defect is IBMJCEPlus#716 The associated Austin APAR
  is IJ52595 JVMs
   affected: Java 8.0 The fix was delivered for Java 8
  sr8 fp40 The
   affected jar is "ibmjceplus.jar". The build level of
  this jar for
   the affected releases is Java 8 20241017
  
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
  IBM SDK, Java Technology Edition
   8 SR8 FP40 (8.0.8.40)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
   - IBM Semeru Runtimes, Version 11 and later
   https://www.ibm.com/semeru-runtimes/downloads/
   - IBM SDK, Java Technology Edition, Version 8
   https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
   - Java SDK Products on z/OS
   https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels