JDK-8312306 : Add more Reference.reachabilityFence() calls to the security classes using Cleaner
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Affected Version: 11,17,21,22
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2023-07-18
  • Updated: 2025-06-03
  • Resolved: 2023-08-31
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 22
22 b14Fixed
Related Reports
Relates :  
JDK-8358451 - SunJCE PBEKey impl should throw IllegalStateException when getEncoded() is called
Relates :  
JDK-8311902 - Concurrency regression in the PBKDF2 key impl of SunJCE provider
Relates :  
JDK-8315944 - SunJCE provider should not zeroize the deserialized key values
Description
Needs to update various Key impl classes with similar changes as in JDK-8311902.
Comments
Yes, this would affect older releases also.
06-09-2023
Valerie, I think this affects previous releases too, right? I marked down to 11, since I see Cleaner uses there too: src/java.base//share/classes/com/sun/crypto/provider/PBEKey.java: // Use the cleaner to zero the key when no longer referenced src/java.base//share/classes/com/sun/crypto/provider/PBEKey.java: CleanerFactory.cleaner().register(this, src/java.base//share/classes/com/sun/crypto/provider/PBKDF2KeyImpl.java: // Use the cleaner to zero the key when no longer referenced src/java.base//share/classes/com/sun/crypto/provider/PBKDF2KeyImpl.java: CleanerFactory.cleaner().register(this, src/java.base//share/classes/com/sun/crypto/provider/DESedeKey.java: // Use the cleaner to zero the key when no longer referenced src/java.base//share/classes/com/sun/crypto/provider/DESedeKey.java: CleanerFactory.cleaner().register(this, src/java.base//share/classes/com/sun/crypto/provider/DESKey.java: // Use the cleaner to zero the key when no longer referenced src/java.base//share/classes/com/sun/crypto/provider/DESKey.java: CleanerFactory.cleaner().register(this,
01-09-2023
Changeset: 2436fb01 Author: Valerie Peng <valeriep@openjdk.org> Date: 2023-08-31 20:40:25 +0000 URL: https://git.openjdk.org/jdk/commit/2436fb010e6a11755ee0ba2dbc51a230a2cb2c7f
31-08-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk/pull/15390 Date: 2023-08-22 18:06:59 +0000
22-08-2023