https://bugs.openjdk.java.net/browse/JDK-8156584 http://cr.openjdk.java.net/~martin/webrevs/openjdk8/AlgorithmId-get-race/
I'm not a crypto engineer, so I'm hoping someone on security-dev adopts this fix. But current webrev is intended to be a complete fix for jdk8.
