Bug 2008309

Summary:	java-17-openjdk / rhel-8.5: SHA3 is not available in FIPS mode
Product:	Red Hat Enterprise Linux 8	Reporter:	zzambers
Component:	java-17-openjdk	Assignee:	Andrew John Hughes <ahughes>
Status:	CLOSED WONTFIX	QA Contact:	OpenJDK QA <java-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.5	CC:	fferrari, mbalao
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-03-27 07:28:04 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description zzambers 2021-09-27 21:12:11 UTC

SHA3 is not available in java-17-openjdk on rhel-8.5 in FIPS mode.

Reproducer:
import java.security.MessageDigest;

public class SHA3Test {
    public static void main(String[] args) throws Exception {
        MessageDigest md = MessageDigest.getInstance("SHA3-256");
    }
}

Exception:
Exception in thread "main" java.security.NoSuchAlgorithmException: SHA3-256 MessageDigest not available
	at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
	at java.base/java.security.MessageDigest.getInstance(MessageDigest.java:185)
	at SHA3Test.main(SHA3Test.java:5)


Openjdk builds:
java-17-openjdk-17.0.0.0.33-0.5.ea.el8
java-17-openjdk-17.0.0.0.35-4.el8

SunPKCS11 provider should support SHA3:
https://bugs.openjdk.java.net/browse/JDK-8242332

Comment 4 RHEL Program Management 2023-03-27 07:28:04 UTC

After evaluating this issue, there are no plans to address it further or fix it in an upcoming release.  Therefore, it is being closed.  If plans change such that this issue will be fixed in an upcoming release, then the bug can be reopened.