git: openjdk/jdk: master: 8244336: Restrict algorithms at JCE layer

[Valerie Peng]

Changeset: 35dabb1a
Branch: master
Author:    Valerie Peng <valeriep at openjdk.org>
Date:      2025-09-12 20:16:33 +0000
URL:       https://git.openjdk.org/jdk/commit/35dabb1a5f31d985f00de21badeeedb026a63b94

8244336: Restrict algorithms at JCE layer

Reviewed-by: mullan, ascarpino, abarashev

+ src/java.base/share/classes/com/sun/crypto/provider/RSACipherAdaptor.java
! src/java.base/share/classes/com/sun/crypto/provider/SunJCE.java
! src/java.base/share/classes/java/security/KeyStore.java
! src/java.base/share/classes/java/security/MessageDigest.java
! src/java.base/share/classes/java/security/Signature.java
! src/java.base/share/classes/javax/crypto/Cipher.java
! src/java.base/share/classes/sun/security/util/AbstractAlgorithmConstraints.java
+ src/java.base/share/classes/sun/security/util/CryptoAlgorithmConstraints.java
! src/java.base/share/classes/sun/security/util/KnownOIDs.java
! src/java.base/share/conf/security/java.security
+ src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/RSACipherAdaptor.java
! src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java
+ test/jdk/java/security/KeyStore/TestDisabledAlgorithms.java
+ test/jdk/java/security/MessageDigest/TestDisabledAlgorithms.java
+ test/jdk/java/security/Signature/TestDisabledAlgorithms.java
+ test/jdk/javax/crypto/Cipher/TestDisabledAlgorithms.java
+ test/jdk/sun/security/pkcs11/Cipher/TestDisabledAlgorithms.java
+ test/jdk/sun/security/pkcs11/Signature/TestNONEwithRSA.java
+ test/jdk/sun/security/util/AlgorithmConstraints/InvalidCryptoDisabledAlgos.java