JDK-4898461 : Support for ECB and CBC/PKCS5Padding
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed. Resolved: Release in which this issue/RFE has been resolved. Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availabitlity Release.
The initial version of the SunPKCS11 provider only support CBC/NoPadding for block ciphers. It should also support ECB/NoPadding, ECB/PKCS5Padding, and CBC/PKCS5Padding.
Release note wording suggestion:
SunPKCS11 provider now supports ECB, CBC modes with PKCS5Padding for certain block ciphers
To be more specific, it supports these following transformations for Cipher.getInstance(...) calls when the corresponding PKCS11 mechanism is supported by the underlying PKCS11 library:
DES, DESede, AES, and Blowfish with CBC mode and PKCS5Padding
DES, DESede, AES with ECB mode and PKCS5Padding
DES, DESede, AES with ECB mode and NoPadding
BugTraq+ Release Management Values
COMMIT TO FIX: