IJ59055: PASSWORD BASED ENCRYPTION SCHEME 2 (PBES2) SUPPORT FOR MODE AND PADDING IN ALGORITHM NAMES.

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: java.security.NoSuchAlgorithmException: No such
  algorithm:
                  PBEWithHmacSHA256And128BitAES/CBC/PKCS5Padding
  at
                  javax.crypto.Cipher.getInstance(Cipher.java:457)
  at
                  javax.crypto.Cipher.getInstance(Cipher.java:519)
  Caused by:
                  java.security.NoSuchAlgorithmException: Cipher
  mode: CBC not
                  found at
  
  com.ibm.crypto.plus.provider.J.engineSetMode(J.java:154) at
                  javax.crypto.Cipher$a.a(Cipher$a.java:28) at
                  javax.crypto.Cipher.getInstance(Cipher.java:78)
  .
  

Local fix

• Use the PBES2 algorithm name without the mode and padding. For
              example, use PBEWithHmacSHA256And256BitAES instead
  of
              PBEWithHmacSHA256And256BitAES/CBC/PKCS5Padding
  

Problem summary

• Password Based Encryption Scheme 2 (PBES2) algorithms defined in
  RFC
              8018 imply the mode and padding. However, valid mode
  and padding
              schemes should be supported.
  

Problem conclusion

• The code was updated to accept valid mode and padding schemes in
              PBES2 algorithm names.
              The associated Hursley RTC Problem Report is 153973
              The associated Austin GIT defect in IBMJCEPlus#1010
              The associated Austin APAR is N/A
              JVMs affected: Java 8.0
              The fix was delivered for:
                  Java 8 sr8 fp70    (8.0
  build_20260331-652-2bf9498d) (FIPS build_20260331-651-d6f8b73b)
  
              The affected jar is ibmjceplus.jar
  
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
  IBM SDK, Java Technology Edition
     8    SR8 FP70  (8.0.8.70)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
    - IBM Semeru Runtimes, Version 11 and later
      https://www.ibm.com/semeru-runtimes/downloads/
    - IBM SDK, Java Technology Edition, Version 8
      https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
    - Java SDK Products on z/OS
      https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels