RFR [10]: JDK-8182484: Remove 1024-bit default requirement from javadoc of java.security.interfaces.DSAKeyPairGenerator
Sean Mullan
sean.mullan at oracle.com
Tue Nov 21 17:28:34 UTC 2017
One more small comment:
51 * <li>Check if the returned key pair generator is an instance of the
52 * DSAKeyPairGenerator interface before casting the result to a
I would just say "... instance of DSAKeyPairGenerator before ..."
--Sean
On 11/16/17 7:39 PM, Valerie Peng wrote:
>
> Thanks for the feedback.
>
> I have updated webrev to address your comments:
> http://cr.openjdk.java.net/~valeriep/8182484/webrev.01/
> CSR has also been updated and proposed.
> Valerie
>
> On 11/14/2017 10:47 AM, Sean Mullan wrote:
>> On 11/8/17 6:47 PM, Valerie Peng wrote:
>>> Hi, Sean,
>>>
>>> I updated the webrev in place - now this change contains only javadoc
>>> update of DSAKeyPairGenerator interface.
>>> CSR has also been updated accordingly. Could you please take a look?
>>
>> Sure.
>>
>> 35 * DSAKeyPairGenerator, each provider must supply (and document) a
>> 36 * default initialization.
>>
>> I suggest saying "should" instead of "must" since we can't really
>> require this to be documented, esp. for a 3rd-party provider. Also I
>> would say "each provider that implements this interface ...".
>>
>> 52 * DSAKeyPairGenerator, then call one of the {@code initialize}
>> methods
>>
>> Slight rewording suggestion: "DSAKeyPairGenerator and calling one of
>> the {@code initialize} methods"
>>
>> 103 * thrown. It is guaranteed that there will always be
>> 104 * default parameters for modulus lengths of 512, 1024, and
>> 2048 bits.
>>
>> I guess "guaranteed" is referring to any impl of DSAKeyPairGenerator,
>> but it is kind of hard to enforce that if you are using a 3rd-party
>> provider. I think we should consider just removing this sentence
>> entirely and leaving the requirements up to the implementation. It's
>> also unusual that we would require 512-bits, and hard-coding that
>> might make it hard to remove later on. Minimally, I think we should
>> remove 512.
>>
>> --Sean
>>
>>>
>>> Thanks,
>>> Valerie
>>>
>>> On 11/2/2017 6:24 PM, Valerie Peng wrote:
>>>> Sean,
>>>>
>>>> Could you help review this RFE below? It's mainly the javadoc update
>>>> of java.security.interfaces.DSAKeyPairGenerator which replaces the
>>>> 1024-bit default value with provider-specific one and removal of the
>>>> earlier changes for working around this javadoc limitation. I reused
>>>> the wordings from existing security classes.
>>>>
>>>> RFE: https://bugs.openjdk.java.net/browse/JDK-8182484
>>>> Webrev: http://cr.openjdk.java.net/~valeriep/8182484/webrev.00/
>>>> CSR: https://bugs.openjdk.java.net/browse/JDK-8190569
>>>>
>>>> Thanks,
>>>> Valerie
>>>
>
More information about the security-dev
mailing list