RFR: release note for JDK-8218723

Jamil Nimeh jamil.j.nimeh at oracle.com
Mon Mar 18 17:49:44 UTC 2019


Thanks, I didn't see RN-Change on the guidance page I was looking at for 
the notes.  Underlying this change in behavior is an actual issue (that 
a BC FIPS provider was causing SunJCE's PBKDF SecKeyFac from working due 
to the interaction between the SKF and the underlying Mac from the two 
different providers).  I'll make the text changes you suggest and we'll 
see how it reads.

Thanks for the feedback,

--Jamil

On 3/18/19 10:35 AM, Adam Petcher wrote:
> A couple of comments:
>
> *) I think it would be helpful to also describe the change using API 
> terms, so it is more clear to programmers who may not recognize all 
> the crypto terminology. Perhaps: "... will now exclusively use the 
> SunJCE Mac service for the underlying pseudorandom function (PRF)."
>
> *) It's labeled RN-IssueFixed, but the text describes a change in 
> behavior, not an issue. Maybe add a sentence like: "This change fixes 
> an issue where..." Or perhaps use RN-Change, if the purpose of the 
> note is to describe the change in behavior.
>
> On 3/18/2019 12:48 PM, Jamil Nimeh wrote:
>> Hi guys,
>>
>> Can someone give a quick review for the release note for JDK-8218723 
>> (the fix for SunJCE PBKDF2 SecretKeyFactories using SunJCE for the 
>> underlying PRF)?  Should be really quick.  I have it here:
>>
>> https://bugs.openjdk.java.net/browse/JDK-8220791
>>
>> Thanks,
>>
>> --Jamil
>>



More information about the security-dev mailing list