IBM Support

IJ56926: ADD SUPPORT FOR AES KEY WRAP TO IBMJCEPLUS

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: N/A
    .
    Stack Trace: N/A
    .
    

Local fix

Problem summary

  • Add support for AES key wrap to IBMJCEPlus
    

Problem conclusion

  • IBMJCEPlus provider now supports AES key wrapping (RFC 3394) and
    AES
                key wrapping with padding (RFC 5649). The associated
    Hursley RTC
                Problem Report is 153404 The associated Austin git
    issue IBMJCEPlus
                #896 JVMs affected: Java 8 The fix was delivered for
    Java 8 SR8 FP60
                The affected jar is "ibmjceplus.jar".
                The build level of this jar for the affected
    releases is
                build_20251201-575 (FIPS 1402) and
    build_20251201-573 (FIPS 1403)
                Note: requires IBM Java Crypto binaries 8.9.18.x or
    higher This fix
                also resolves memory growth experience when using:
    ML-DSA key pair
                generation ML-DSA signature algorithm The associated
    Austin git
                issue for memory growth is IBMJCEPlus #923
    
    .
    This APAR will be fixed in the following Releases:
    .
    IBM Semeru Runtimes
    IBM SDK, Java Technology Edition
       8    SR8 FP60  (8.0.8.60)
    .
    Downloads and supplementary documentation can be found at the
    following locations:
    - For non z/OS operating systems:
      - IBM Semeru Runtimes, Version 11 and later
        https://www.ibm.com/semeru-runtimes/downloads/
      - IBM SDK, Java Technology Edition, Version 8
        https://www.ibm.com/support/pages/java-sdk-downloads/
    - For the z/OS operating system:
      - Java SDK Products on z/OS
        https://www.ibm.com/support/pages/java-sdk-products-zos
    

Temporary fix

Comments

APAR Information

  • APAR number

    IJ56926

  • Reported component name

    SECURITY

  • Reported component ID

    620700125

  • Reported release

    270

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2025-12-18

  • Closed date

    2025-12-18

  • Last modified date

    2025-12-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    SECURITY

  • Fixed component ID

    620700125

Applicable component levels

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"270","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]

Document Information

Modified date:
18 December 2025