Re: RFR: 8315944: SunJCE provider should not zeroize the deserialized key values

2023-09-22 Thread Valerie Peng
On Wed, 20 Sep 2023 21:56:50 GMT, Valerie Peng wrote: > This PR reverts part of the changes under JDK-8312306 which zero-out the > deserialized key bytes after an internal copy has been made. If considering > the deserialized key bytes as input arguments, such cleaning action may be > too aggr

Re: RFR: 8315944: SunJCE provider should not zeroize the deserialized key values

2023-09-21 Thread Bradford Wetmore
On Wed, 20 Sep 2023 21:56:50 GMT, Valerie Peng wrote: > This PR reverts part of the changes under JDK-8312306 which zero-out the > deserialized key bytes after an internal copy has been made. If considering > the deserialized key bytes as input arguments, such cleaning action may be > too aggr

Re: RFR: 8315944: SunJCE provider should not zeroize the deserialized key values

2023-09-21 Thread Weijun Wang
On Wed, 20 Sep 2023 21:56:50 GMT, Valerie Peng wrote: > This PR reverts part of the changes under JDK-8312306 which zero-out the > deserialized key bytes after an internal copy has been made. If considering > the deserialized key bytes as input arguments, such cleaning action may be > too aggr