Disable useNormativeMechFirst for JDK17.

TheRealMDoerr · Jun 10, 2024 · 3451197 · 3451197
1 parent be04de8
commit 3451197
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11AEADCipher.java b/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11AEADCipher.java
@@ -475,9 +475,8 @@ private void initialize() throws PKCS11Exception {
             }
 
             if (type == Transformation.AES_GCM) {
-                CK_VERSION cryptokiVersion = token.p11.getVersion();
-                boolean useNormativeMechFirst = cryptokiVersion.major > 2 ||
-                    (cryptokiVersion.major == 2  && cryptokiVersion.minor >= 40);
+                // JDK-8255409 allows using useNormativeMechFirst dependent on token.p11.getVersion();
+                boolean useNormativeMechFirst = false;
                 if (encrypt) {
                     token.p11.C_GCMEncryptInitWithRetry(session.id(), mechWithParams,
                         p11KeyID, useNormativeMechFirst);