IV76660: AES/CTR DOESN'T BEHAVE STREAM CIPHER LIKE

APAR status

• Closed as program error.

Error description

• Error Message: When using AES/CTR, the length of output of
  Cipher.update() is not the same as the input data length.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The problem is caused because the data unit processed each time
  is not one byte when using AES/CTR mode
  

Problem conclusion

• The fix is to change the data unit to be processed to be one
  byte each time for AES/CTR.
  The associated RTC PR is 97798
  The associated Austin CMVC defect is 116826
  The associated Hursley CMVC defect is 202847
  The associated APAR is IV75701
  JVMs affected : Java 5.0, Java 6.0, Java 6.1, Java 7.0 , Java
  7.1 and Java 8.0
  The fix was delivered for Java 5.0 SR16 FP14, Java 6.0 SR16
  FP15, Java 6.1 SR8 FP15, Java 7.0 SR9 FP20, Java 7.1 SR3 FP20
  and Java 8.0 SR2
  The affected jar is "ibmjceprovider.jar".
  The build level of this jar for the affected releases is
  "20150812"
  .
  This APAR will be fixed in the following Java Releases:
     7 R1 SR3 FP20  (7.1.3.20)
     8    SR2       (8.0.2.0)
     6    SR16 FP15 (6.0.16.15)
     6 R1 SR8 FP15  (6.1.8.15)
     7    SR9 FP20  (7.0.9.20)
     5.0  SR16 FP14 (5.0.16.14)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IV76659

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSY

     UP