PH66569: IBMJCEHYBRIDEXCEPTION WITH HYBRID PROVIDER IN GCM MODE

APAR status

• Closed as program error.

Error description

• Error Message: com.ibm.crypto.ibmjcehybrid.provider.HybridCipher
  shouldFrameworkHandle
   java.lang.IllegalStateException: (4) This method is not
  supported in GCM mode.
  .
  Stack Trace: FINER:
  com.ibm.crypto.ibmjcehybrid.provider.HybridCipher
  shouldFrameworkHandle
   java.lang.IllegalStateException: (4) This method is not
  supported in GCM mode.
       at
  com.ibm.crypto.hdwrCCA.provider.AESCipher.engineUpdate(AESCipher
  .java:1819)
       at javax.crypto.Cipher.update(Unknown Source)
       at
  com.ibm.crypto.ibmjcehybrid.provider.HybridCipher.update(HybridC
  ipher.java:2178)
       at
  com.ibm.crypto.ibmjcehybrid.provider.HybridCipher.engineUpdate(H
  ybridCipher.java:2082)
       at javax.crypto.CipherSpi.a(Unknown Source)
       at javax.crypto.CipherSpi.engineDoFinal(Unknown Source)
       at javax.crypto.Cipher.doFinal(Unknown Source)
       at com.ibm.jsse2.n$q$a.a(n$q$a.java:3)
       at com.ibm.jsse2.c.e(c.java:27)
       at com.ibm.jsse2.c.a(c.java:86)
       at com.ibm.jsse2.d.a(d.java:161)
       at com.ibm.jsse2.d.a(d.java:66)
       at com.ibm.jsse2.bk.c(bk.java:13)
       at com.ibm.jsse2.bk.b(bk.java:223)
       at com.ibm.jsse2.bk.a(bk.java:292)
       at com.ibm.jsse2.bk.wrap(bk.java:170)
       at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:16)
  .
  N/A
  

Local fix

Problem summary

• GCM Mode error being caused by HYBRID and was unable to failover
  to correct provider to handle.
  

Problem conclusion

• With the inclusion of IBMJCEPlus, there was a framework that was
  no longer needed in the code as the behavior changed on how
  HYBRID would failover in GCM specific scenarios. HYBRID can
  failover to IBMJCEPlus in these cases, so the framework was no
  longer needed.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
  IBM SDK, Java Technology Edition
     8    SR8 FP50  (8.0.8.50)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For the z/OS operating system:
    - Java SDK Products on z/OS
      https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels