IBM Support

IV70495: IBMPKCS11IMPL SECURITY PROVIDER: 'AES' CAUSES COM.IBM.PKCS11.PKCS11EXCEPTION: MECHANISM INVALID

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: When attempting to specify a transformation of
    "AES" by itself, the IBMPKCS11Impl provider throws
    com.ibm.pkcs11.PKCS11Exception: Mechanism invalid.The code works
    fine when specifying the IBMJCE provider."AES/CBC/NoPadding", it
    works
    fine.***********************************************************
    ***************************The JVM used for testing ...java
    version "1.8.0"Java(TM) SE Runtime Environment (build
    pmz6480sr1-20150205_02(SR1))IBM J9 VM (build 2.8, JRE 1.8.0 z/OS
    s390x-64 Compressed References 20150204_233938 (JIT enabled, AOT
    enabled)J9VM - R28_jvm.28_20150204_0201_B233938JIT  -
    tr.r14.java_20150202_84607GC   -
    R28_jvm.28_20150204_0201_B233938_CMPRSSJ9CL -
    20150204_233938)JCL - 20150127_01 based on Oracle
    jdk8u31-b12JESA:/home/g553852/fvt/80_20150205_02/>
    .
    Stack Trace: com.ibm.pkcs11.PKCS11Exception: Mechanism invalidat
    com.ibm.pkcs11.nat.NativePKCS11Session.encryptInit(Native
    Method)at
    com.ibm.crypto.pkcs11impl.provider.Session.encryptInit(Session.j
    ava:705)at
    com.ibm.crypto.pkcs11impl.provider.PKCS11Cipher.engineInit(PKCS1
    1Cipher.java:154)at
    com.ibm.crypto.pkcs11impl.provider.GeneralPKCS11Cipher.engineIni
    t(GeneralPKCS11Cipher.java:539)at
    com.ibm.crypto.pkcs11impl.provider.GeneralPKCS11Cipher.engineIni
    t(GeneralPKCS11Cipher.java:580)at
    javax.crypto.Cipher.init(Unknown Source)at
    javax.crypto.Cipher.init(Unknown Source)at
    cjjtestCipher.cjjtestCipher(cjjtestCipher.java:63)at
    cjjtestCipher.main(cjjtestCipher.java:40)
    .
    

Local fix

Problem summary

  • When attempting to specify a transformation of "AES" by itself,
    the IBMPKCS11Impl provider throws
    com.ibm.pkcs11.PKCS11Exception: Mechanism invalid.The code works
    fine when specifying the IBMJCE provider."AES/CBC/NoPadding", it
    works
    fine.***********************************************************
    ***************************The JVM used for testing ...java
    version "1.8.0"Java(TM) SE Runtime Environment (build
    pmz6480sr1-20150205_02(SR1))IBM J9 VM (build 2.8, JRE 1.8.0 z/OS
    s390x-64 Compressed References 20150204_233938 (JIT enabled, AOT
    enabled)J9VM - R28_jvm.28_20150204_0201_B233938JIT  -
    tr.r14.java_20150202_84607GC   -
    R28_jvm.28_20150204_0201_B233938_CMPRSSJ9CL -
    20150204_233938)JCL - 20150127_01 based on Oracle
    jdk8u31-b12JESA:/home/g553852/fvt/80_20150205_02/>
    

Problem conclusion

  • An incorrect fix for an earlier problem caused thisregression.
    The incorrect fix has been removed.
    .
    This APAR will be fixed in the following Java Releases:
       8    SR1       (8.0.1.0)
       6    SR16 FP4  (6.0.16.4)
       6 R1 SR8 FP4   (6.1.8.4)
       7 R1 SR3       (7.1.3.0)
       7    SR9       (7.0.9.0)
    .
    Contact your IBM Product's Service Team for these Service
    Refreshes and Fix Packs.
    For those running stand-alone, information about the Service
    Refreshes and Fix Packs can be found at:
               https://www.ibm.com/developerworks/java/jdk/
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV70495

  • Reported component name

    SECURITY

  • Reported component ID

    620700125

  • Reported release

    270

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-03-03

  • Closed date

    2015-03-03

  • Last modified date

    2015-03-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    SECURITY

  • Fixed component ID

    620700125

Applicable component levels

  • R270 PSY

       UP

  • R600 PSY

       UP

  • R260 PSY

       UP

[{"Line of Business":{"code":"LOB36","label":"IBM Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"270"}]

Document Information

Modified date:
10 September 2020