Code review request, 7106773: 512 bits RSA key cannot work with SHA384 and SHA512

Xuelei Fan xuelei.fan at oracle.com
Fri Nov 11 05:09:21 UTC 2011


Hi Weijun,

Are you available to review my fix for CR 7106773? The fix in JSSE part 
is straightforward in that the call to 
SignatureAndHashAlgorithm.getPreferableAlgorithm() needs an additional 
Key parameter for RSA key exchanges. The significant change is at 
sun/security/util/DisabledAlgorithmConstraints.java. I modified the code 
in order to get the key size of the unextractable key in PKCS#11 device.

webrev: http://cr.openjdk.java.net/~xuelei/7106773/webrev.00/

Thanks,
Xuelei



More information about the security-dev mailing list