infernap12/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2026-07-17 14:38:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

8386600: Fix comparison checks in DHasKEM

Browse Source 
Reviewed-by: mullan
This commit is contained in:
Hai-May Chao 2026-06-12 17:08:13 +00:00
parent e1ec755882
commit 95be3f9520
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/java.base/share/classes/sun/security/ssl/DHasKEM.java
View File

@ -268,17 +268,17 @@ public class DHasKEM implements KEMSpi {
// RFC 8446 section 7.4.2: checks for all-zero
// X25519/X448 shared secret.
if (kaAlgorithm.equals("X25519") ||
kaAlgorithm.equals("X448")) {
if (this == X25519 || this == X448) {
byte[] s = secret.getEncoded();
byte data = 0;
for (byte b : s) {
if (b != 0) {
return secret;
}
data |= b;
}
if (data == 0) {
// Trigger ILLEGAL_PARAMETER alert
throw new IllegalArgumentException(
"All-zero shared secret");
}
// Trigger ILLEGAL_PARAMETER alert
throw new IllegalArgumentException(
"All-zero shared secret");
}
return secret;