On Sun, 28 Mar 2021 04:09:38 GMT, Xue-Lei Andrew Fan <xue...@openjdk.org> wrote:
> Per NIST SP 800-56A Rev 3 (section 5.7.1), the shared secret cannot be 1 or
> (p - 1). This update adds this validation in the JDK provider implementation.
>
> No new regression test, simple update and hard to construct a shared secret
> of 1 or (p - 1).
src/java.base/share/classes/com/sun/crypto/provider/DHKeyAgreement.java line
321:
> 319: z.equals(modulus.subtract(BigInteger.ONE))) {
> 320: throw new ProviderException(
> 321: "Generated secret is out-of-rang of (1, p -1)");
typo: rang -> range
-------------
PR: https://git.openjdk.java.net/jdk/pull/3232
