Code Review Request, JDK-8172869 4096 is not supported yet for the DH Parameter Generator

Anthony Scarpino anthony.scarpino at oracle.com
Tue Jan 24 19:46:34 UTC 2017


On 01/24/2017 11:24 AM, Xuelei Fan wrote:
> Hi,
>
> Please review this spec documentation update:
>     http://cr.openjdk.java.net/~xuelei/8172869/webrev.00/
>
> In the java.security.AlgorithmParameterGenerator specification, 4096
> bits DH parameter generator is specified as a required feature.
>
> However, the 4096 bits DH parameter generator is not supported yet in
> JDK.  Although the 4096 bits DH key generation is supported, but it uses
> the predefined DH parameters.
>
> This update removes the 4096 bits DH parameter generator requirement
> from the java.security.AlgorithmParameterGenerator specification.
>
> Thanks,
> Xuelei

The change looks fine, but does it make sense to mention that 4k bit DH 
uses predefined parameters in the this section or somewhere else?

Tony



More information about the security-dev mailing list