IV69557: USE INTERNAL TOKEN FOR RSA DECRYPTION WITH ZEROPADDING

APAR status

• Closed as program error.

Error description

• Error Message: ICSF returnCode 8 reasonCode 2040 "The key
  identifier provided is an external or null token, where an
  internal token was required".
  .
  Stack Trace:
  com.ibm.crypto.hdwrCCA.provider.JCECCARuntimeException: Hardware
  error from call CSNDDSG returnCode 8 reasonCode 2040at
  com.ibm.crypto.hdwrCCA.provider.RSA.a(RSA.java:326)at
  com.ibm.crypto.hdwrCCA.provider.RSA.engineDoFinal(RSA.java:670)a
  t javax.crypto.Cipher.doFinal(Unknown Source)
  .
  

Local fix

Problem summary

• Using a clear key to performing RSA decryption with ZeroPadding
  returns returnCode 8 reasonCode2040
  

Problem conclusion

• The failing code has been modified to use the internal
  representation of the clear key for the decryption operation.
  .
  This APAR will be fixed in the following Java Releases:
   7 SR9 (7.0.9.0)
   7 R1 SR3 (7.1.3.0)
   8 SR1 (8.0.1.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the Service
  Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R260 PSY

     UP