Re: RFR: 8315944: SunJCE provider should not zeroize the deserialized key values

2023-09-22 Thread Valerie Peng
On Wed, 20 Sep 2023 21:56:50 GMT, Valerie Peng wrote: > This PR reverts part of the changes under JDK-8312306 which zero-out the > deserialized key bytes after an internal copy has been made. If considering > the deserialized key bytes as input arguments, such cleaning action may be > too aggr

Re: RFR: 8315944: SunJCE provider should not zeroize the deserialized key values

2023-09-21 Thread Bradford Wetmore
On Wed, 20 Sep 2023 21:56:50 GMT, Valerie Peng wrote: > This PR reverts part of the changes under JDK-8312306 which zero-out the > deserialized key bytes after an internal copy has been made. If considering > the deserialized key bytes as input arguments, such cleaning action may be > too aggr

Re: RFR: 8315944: SunJCE provider should not zeroize the deserialized key values

2023-09-21 Thread Weijun Wang
On Wed, 20 Sep 2023 21:56:50 GMT, Valerie Peng wrote: > This PR reverts part of the changes under JDK-8312306 which zero-out the > deserialized key bytes after an internal copy has been made. If considering > the deserialized key bytes as input arguments, such cleaning action may be > too aggr

RFR: 8315944: SunJCE provider should not zeroize the deserialized key values

2023-09-20 Thread Valerie Peng
This PR reverts part of the changes under JDK-8312306 which zero-out the deserialized key bytes after an internal copy has been made. If considering the deserialized key bytes as input arguments, such cleaning action may be too aggressive. Thus, on second thought, I am reverting to earlier behav