JDK-8242556 : Cannot load RSASSA-PSS public key with non-null params from byte array
- Type: Bug
- Component: security-libs
- Sub-Component: java.security
- Affected Version: 8,11,15
- Priority: P3
- Status: Closed
- Resolution: Fixed
- Submitted: 2020-04-13
- Updated: 2022-09-28
- Resolved: 2020-04-14
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 11 | JDK 15 | JDK 8 | Other |
|---|---|---|---|
| 11.0.9-oracleFixed | 15 b19Fixed  |
8u271Fixed |
openjdk8u272Fixed |
Related Reports
|
Blocks :
|
|
|
Duplicate :
|
|
|
Relates :
|
|
|
Relates :
|
Description
The following piece of code fails with an InvalidKeySpecException:
-------------
KeyPairGenerator kpg = KeyPairGenerator.getInstance("RSASSA-PSS");
KeyFactory kf = KeyFactory.getInstance("RSASSA-PSS");
kpg.initialize(new RSAKeyGenParameterSpec(2048,
RSAKeyGenParameterSpec.F4,
new PSSParameterSpec(
"SHA-384", "MGF1",
new MGF1ParameterSpec("SHA-384"),
48, PSSParameterSpec.TRAILER_FIELD_BC)));
kf.generatePublic(new X509EncodedKeySpec(
kpg.generateKeyPair().getPublic().getEncoded()));
---------------
Caused by: java.security.ProviderException: Unsupported algorithm 1.2.840.113549.1.1.10
at java.base/sun.security.rsa.RSAUtil$KeyType.lookup(RSAUtil.java:66)
at java.base/sun.security.rsa.RSAUtil.getParamSpec(RSAUtil.java:142)
at java.base/sun.security.rsa.RSAUtil.getParamSpec(RSAUtil.java:133)
at java.base/sun.security.rsa.RSAPublicKeyImpl.<init>(RSAPublicKeyImpl.java:130)
Cause
=====
This is because when the key is read, the parameters of the AlgorithmId is instantiated with the OID (in AlgorithmId::decodeParams, algParams = AlgorithmParameters.getInstance(algidString)), so its getAlgorithm() always returns the OID string, and cannot be recognized by RSAUtil::lookup.
Suggested fix:
===========
diff --git a/src/java.base/share/classes/sun/security/rsa/RSAUtil.java b/src/java.base/share/classes/sun/security/rsa/RSAUtil.java
--- a/src/java.base/share/classes/sun/security/rsa/RSAUtil.java
+++ b/src/java.base/share/classes/sun/security/rsa/RSAUtil.java
@@ -63,6 +63,9 @@
}
}
// no match
+ if (name.equals(AlgorithmId.RSASSA_PSS_oid.toString())) {
+ return PSS;
+ }
throw new ProviderException("Unsupported algorithm " + name);
}
}
Comments
|