JDK-8164494 : SunPKCS11 requires a non-empty PBE password
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Affected Version: 9
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic
  • Submitted: 2016-08-19
  • Updated: 2016-08-25
  • Resolved: 2016-08-19
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 9
9 b133Fixed
Related Reports
Duplicate :  
JDK-8164307 - sun/security/krb5/auto/EmptyPassword.java failed with IllegalArgumentException: EncryptionKey: Key bytes cannot be null
Relates :  
JDK-6977937 - The SunJCE PBKDF2KeyImpl is requiring the MAC instance also be from SunJCE.
Description
The SunPKCS11 JCE provider requires a non-empty password during PBKDF key derivation.
When a non-empty password is supplied then failover to using the SunJCE provider.

Some components, for example Kerberos, can supply an empty password.
Comments
Fix can be validated by running test: jdk/test/sun/security/krb5/auto/EmptyPassword.java
19-08-2016