IV71143: IBMPKCS11IMPL - AES/ECB SERVICE CHOSEN WHEN AES/GCM SPECIFIED

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  When an invoking application tries to create a Cipher object for
  AES/GCM/NoPadding on a system where the underlying crypto
  adapter does not support AES/GCM,the Cipher class of the IBMJCE
  Framework will incorrectly match the application's request with
  the IBMPKCS11Impl Service for "AES/ECB/NoPadding".
  

Local fix

Problem summary

• When an invoking application tries to create a Cipher object for
  AES/GCM/NoPadding on a system where the underlying crypto
  adapter does not support AES/GCM,the Cipher class of the IBMJCE
  Framework will incorrectly match the application's request with
  the IBMPKCS11Impl Service for "AES/ECB/NoPadding".
  

Problem conclusion

• Instances of the PKCS11ImplService class define all services
  exported by the IBMPKCS11Impl provider.  For exported
  PKCS11ImplService objects which define "Ciphers",the
  IBMPKCS11Impl provider had failed to initialize these Cipher
  service objects with enough information to enablethe "service
  selection logic" of the IBMJCE Framework to make the correct
  choice.
  .
  This APAR will be fixed in the following Java Releases:
     8    SR1       (8.0.1.0)
     6    SR16 FP4  (6.0.16.4)
     7    SR9       (7.0.9.0)
     7 R1 SR3       (7.1.3.0)
     6 R1 SR8 FP4   (6.1.8.4)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the Service
  Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R270 PSY

     UP

• R600 PSY

     UP

• R260 PSY

     UP