IZ76737: IBM JCE CANNOT ENCRYPT LONG STRING

APAR status

• Closed as program error.

Error description

• APAR Description :  IBM JCE cannot encrypt long string
  
  JDK Affected : 5.0 and 6.0
  
  Jar Affected: ibmjceprovider.jar
  
  
  
  Details:
  
  Customer reported this issue on zOS IBM JDK 160 SR7. However,
  problem is reproducible on Windows IBM JDK 160 SR8 as well.
  
  Error:
  
  -------------------------------
  error:              Data size too large
  provider:           IBMJCE version 1.2
  algorithm:          RSA/ECB/OAEPWithSHA1AndMGF1Padding
  -------------------------------
  class javax.crypto.IllegalBlockSizeException: Data size too
  large
  com.ibm.crypto.provider.RSA.a(Unknown Source)
  com.ibm.crypto.provider.RSA.engineDoFinal(Unknown Source)
  javax.crypto.Cipher.doFinal(Unknown Source)
  

Local fix

• Level 3 to update
  

Problem summary

• IllegalBlockSizeException thrown errantly for some RSA/OAEP/MGF1
  scenarios
  

Problem conclusion

• Affects ibmjceprovider.jar.  Hursley defect 167099.  Likely
  available in 5.0 SR 12 and 6.0 SR 9.
  
  SVN build date: 20100611_01
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV JAVA CRYPTO

• Fixed component ID

  TIVSECJCE

Applicable component levels

• R100 PSN

     UP