dogtagpki

#2023 Randomizing IVParameterSpec.
Closed: migrated by dmoluguw. Opened by edewata.

Closed: migrated
Reopen Issue

There are various places where IVParameterSpec is created with constant byte array:

byte iv[] = { 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1 };
IVParameterSpec param = new IVParameterSpec(iv);

The byte array should be initialized with random numbers with a code similar to this:

SecureRandom random = SecureRandom.getInstance("pkcs11prng", "Mozilla-JSS");
byte[] iv = new byte[8];
random.nextBytes(iv);
IVParameterSpec param = new IVParameterSpec(iv);

After discussion with jmagne on 04/14/2016: 10.4

Metadata Update from @edewata:
- Issue set to the milestone: UNTRIAGED

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/2327

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.

Metadata Update from @dmoluguw:
- Issue close_status updated to: migrated
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Normal
None
None
None
minor
10.3
None
defect
General
Community
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.