> On Nov 24, 2021, at 11:14 AM, Anders Rundgren <anders.rundgren....@gmail.com> > wrote: > > Hi List, > > Although this bug is for BC, I believe the problem is rather in JDK 17: > https://github.com/bcgit/bc-java/issues/823#issuecomment-977919380
Can you point out which part in JDK 17 the problem is? Please note that in JDK 17 the default encryption algorithm for PKCS12 is upgraded to PBEWithHmacSHA256AndAES_256. If BC's decryption is not an exact reverse of SUN's encryption, then definitely the output will be garbage and you will not see the correct padding bytes. Thanks, Max > > Thanx, > Anders
