PH67673: CIPHER TRANSFORMATION FIX ON JAVA 21

APAR status

• Closed as program error.

Error description

• Exceptions seen with cipher transformation
  RSA/ECB/OAEPWithSHA-256AndMGF1Padding with Semeru21 followed by
  exception stack trace - IBMJCEHybridException: Failover
  exhausted, all registered providers attempted and failed.
  .
  Stack Trace: Exception#0 java.lang.RuntimeException:
  java.security.InvalidAlgorithmParameterException: (4)OAEP
  padding is not supported for CLEAR keys.
  Stack Trace:
         at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.RSA.engineWra
  
  p(RSA.java:1223)
  Exception#1 javax.crypto.NoSuchPaddingException: Padding:
  OAEPWithSHA-256AndMGF1Padding not implemented
  Stack Trace:
         at
  java.base/com.ibm.crypto.plus.provider.RSA.engineSetPadding(RSA.
  
  java:381)
  Exception#2 java.security.NoSuchAlgorithmException: No such
  algorithm: RSA//OAEPWithSHA-256AndMGF1Padding
  Stack Trace:
         at
  java.base/javax.crypto.Cipher.getInstance(Cipher.java:758)
  .
  

Local fix

• N/A
  

Problem summary

• The problem was occurring due to an argument that is being
  checked for CCA which was not meant to be allowed on HYBRID.
  

Problem conclusion

• The argument that was listed within HYBRID has been changed to
  match what is in IBMJCECCA to fix the issue that was occurring.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
     21              21.0.9.0
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For the z/OS operating system:
    - Java SDK Products on z/OS
      https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels