infernap12/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2026-01-28 03:58:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

8374317: Change GCM IV size to 12 bytes when encrypting/decrypting TLS session ticket

Browse Source 
Reviewed-by: djelinski, mpowers, ascarpino
This commit is contained in:
Artur Barashev 2026-01-02 13:28:15 +00:00
parent efb79dc6b4
commit 3439512401
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/java.base/share/classes/sun/security/ssl/SessionTicketExtension.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright (c) 2019, 2025, Oracle and/or its affiliates. All rights reserved. * Copyright (c) 2019, 2026, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
* *
* This code is free software; you can redistribute it and/or modify it * This code is free software; you can redistribute it and/or modify it
@ -178,6 +178,7 @@ final class SessionTicketExtension {
*/ */
static final class SessionTicketSpec implements SSLExtensionSpec { static final class SessionTicketSpec implements SSLExtensionSpec {
private static final int GCM_TAG_LEN = 128; private static final int GCM_TAG_LEN = 128;
private static final int GCM_IV_LEN = 12;
ByteBuffer data; ByteBuffer data;
static final ByteBuffer zero = ByteBuffer.wrap(new byte[0]); static final ByteBuffer zero = ByteBuffer.wrap(new byte[0]);
@ -215,7 +216,7 @@ final class SessionTicketExtension {
try { try {
StatelessKey key = KeyState.getCurrentKey(hc); StatelessKey key = KeyState.getCurrentKey(hc);
byte[] iv = new byte[16]; byte[] iv = new byte[GCM_IV_LEN];
SecureRandom random = hc.sslContext.getSecureRandom(); SecureRandom random = hc.sslContext.getSecureRandom();
random.nextBytes(iv); random.nextBytes(iv);
@ -269,7 +270,7 @@ final class SessionTicketExtension {
return null; return null;
} }
iv = new byte[16]; iv = new byte[GCM_IV_LEN];
data.get(iv); data.get(iv);
Cipher c = Cipher.getInstance("AES/GCM/NoPadding"); Cipher c = Cipher.getInstance("AES/GCM/NoPadding");
c.init(Cipher.DECRYPT_MODE, key.key, c.init(Cipher.DECRYPT_MODE, key.key,