PM89313: POTENTIAL WEAKNESS IN KEYS USED TO PROTECT ENCRYPTED OFFLINE CACHE AND JSONSTORE DATA ON IOS

APAR status

• Closed as program error.

Error description

• The generated encryption keys used to protect EOC data and
  encrypted JSONStore data on iOS have a potential weakness.
  

Local fix

• There is no work around available at this time.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Worklight and Mobile Foundation 5.0.0 and 5.0.5          *
  * developers using the Encrypted Offline Cache feature on iOS. *
  * IBM Worklight and Mobile Foundation 5.0.5 developers using   *
  * the JSONStore feature with encryption enabled on iOS.        *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * The generated encryption keys used to protect EOC data and   *
  * encrypted JSONStore data on iOS have a potential weakness.   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• Affected iOS function was changed to ensure proper generation of
  new keys and migration of affected existing keys.
  
  The fix for this APAR is currently targeted for inclusion in
  fixpack 5.0.6.0.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WORKLIGHT CONSU

• Fixed component ID

  5725I4301

Applicable component levels

• R505 PSY

     UP