On 5/22/14 10:49 AM, Brent Putman wrote: > >> >> > Before I spend more time delving into this, I just wanted to see if >> this was on anyone's radar. I don't see anything in Jira about it >> currently. >> >> No, feel free to submit a patch :-) >> > > > Ok, I will do that soon. I'll make a note in the Jira issue that it's > probably not prudent to apply until the BC 1.51 version comes out, and > it's confirmed that it actually works as advertised. > > Also, this would probably mean that for Java 1.7 and higher, if BC is > being used it would have to be at least 1.51. Otherwise it will fail > with either a) the GCMParameterSpec not being supported at all (BC < > 1.50), or b) it will trip the Cipher getIV() bug (BC = 1.50).
Just finally got this done: https://issues.apache.org/jira/browse/SANTUARIO-392 I wound up handling the BC version cases differently than I said above. I added the capability for a system property override that will force the use of IvParameterSpec, even if it's Java 1.7+. This will allow things to continue to work with BC <= 1.50.
