Blame SOURCES/jdk8251117-rh1860990-pkcs11_key_length.patch

08628f
# HG changeset patch
08628f
# User mbalao
08628f
# Date 1596572361 10800
08628f
#      Tue Aug 04 17:19:21 2020 -0300
08628f
# Node ID d8a0513b92ee262d4e64c1e13d43e1b3f3e5c5d5
08628f
# Parent  a259b5b1bc7cc4dd0d8fa19e8bdbf96a4e76224f
08628f
8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher
08628f
Reviewed-by: valeriep
08628f
Contributed-by: zzambers@redhat.com
08628f
08628f
diff --git a/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11AEADCipher.java b/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11AEADCipher.java
08628f
--- a/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11AEADCipher.java
08628f
+++ b/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11AEADCipher.java
08628f
@@ -279,7 +279,9 @@
08628f
         SecureRandom sr)
08628f
         throws InvalidKeyException, InvalidAlgorithmParameterException {
08628f
         reset(true);
08628f
-        if (fixedKeySize != -1 && key.getEncoded().length != fixedKeySize) {
08628f
+        if (fixedKeySize != -1 &&
08628f
+                ((key instanceof P11Key) ? ((P11Key) key).length() >> 3 :
08628f
+                            key.getEncoded().length) != fixedKeySize) {
08628f
             throw new InvalidKeyException("Key size is invalid");
08628f
         }
08628f
         P11Key newKey = P11SecretKeyFactory.convertKey(token, key, ALGO);
08628f
diff --git a/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Cipher.java b/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Cipher.java
08628f
--- a/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Cipher.java
08628f
+++ b/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Cipher.java
08628f
@@ -345,7 +345,9 @@
08628f
             SecureRandom random)
08628f
             throws InvalidKeyException, InvalidAlgorithmParameterException {
08628f
         reset(true);
08628f
-        if (fixedKeySize != -1 && key.getEncoded().length != fixedKeySize) {
08628f
+        if (fixedKeySize != -1 &&
08628f
+                ((key instanceof P11Key) ? ((P11Key) key).length() >> 3 :
08628f
+                            key.getEncoded().length) != fixedKeySize) {
08628f
             throw new InvalidKeyException("Key size is invalid");
08628f
         }
08628f
         switch (opmode) {