IV70547: IBMJCE SECURITY PROVIDER: CIPHER.DOFINAL FAILS WITH PBEWITHHMACSHA* ALGORITHMS

APAR status

• Closed as program error.

Error description

• Error Message: A java.lang.IllegalArgumentException: Bad
  arguments exception is thrown when calling one of the following
  Cipher.doFinal methods for the PBEWithHmacSHA* Cipher algorithms
  with the IBMJCE security provider, both of which do not take an
  input byte array as an argument:Cipher.doFinal();Cipher.doFinal(
  byte<OSB><CSB> output, int outputOffset );
  .
  Stack Trace: java.lang.IllegalArgumentException: Bad argumentsat
  javax.crypto.Cipher.doFinal(Unknown Source)at
  com.ibm.crypto.provider.aM.engineDoFinal(Unknown Source)at
  javax.crypto.Cipher.doFinal(Unknown Source)...
  .
  

Local fix

• This issue can be worked around by calling one of the other
  Cipher.doFinal methods which take an input byte array as a
  parameter.1. For Cipher.doFinal(), workaround is to
  call:Cipher.doFinal(new byte<OSB>0<CSB>);2. For Cipher.doFinal(
  byte<OSB><CSB> output, int outputOffset ), workaround is to
  call:Cipher.doFinal( new byte<OSB>0<CSB>, 0, 0, output,
  outputOffset );
  

Problem summary

• A java.lang.IllegalArgumentException: Bad arguments exception is
  thrown when calling one of the following Cipher.doFinal methods
  for the PBEWithHmacSHA* Cipher algorithms with the IBMJCE
  security provider, both of which do not take an input byte array
  as an argument:Cipher.doFinal();Cipher.doFinal( byte<OSB><CSB>
  output, int outputOffset );
  

Problem conclusion

• The IBMJCE security provider has been updated to prevent the
  exception from occurring.
  .
  This APAR will be fixed in the following Java Releases:
   8 SR1 (8.0.1.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the Service
  Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R270 PSY

     UP