Impact

This advisory concerns customers that create, clone or re-use MessageDigest instances across many threads in their application, while they use ACCP as a JCE provider. A race condition can cause ACCP’s MessageDigest hashing algorithms to return the same value for different inputs.

Patches

Fixed in version 1.6.1. All users are advised to upgrade as soon as possible.

Workarounds

None