[ https://issues.jboss.org/browse/SECURITY-992?page=com.atlassian.jira.plug... ] Ricardo Martin Camarero updated SECURITY-992: --------------------------------------------- Component/s: JBossSX Description: When a byte array of certain lengths (1026 and 3072 for example) is encoded in base64 using the class {{org.jboss.security.Base64Encoder}} the last chunk of four bytes is omitted. Steps to Reproduce: Attached a simple reproducer (the length of the array is passed): {noformat} javac -cp ~/picketbox/dist/target/picketbox-5.1.1.Beta1-SNAPSHOT.jar Reproducer.java java -cp picketbox/main/picketbox-5.1.1.Final.jar:. Reproducer 1026 {noformat} You will see that with 1026 and 3072 the first base64 is missing the last four bytes (one is using picketbox and the other java8 Base64 class). Summary: org.jboss.security.Base64Encoder doesn't work for certain lengths (1026 or 3072 for example) (was: git diff) Workaround Description: None, use another Base64 implementation like the one in JDK. Affects Version/s: PicketBox_5_1_0.Final -- This message was sent by Atlassian JIRA (v7.5.0#75005)