RFR: release note for JDK-8218723
Jamil Nimeh
jamil.j.nimeh at oracle.com
Mon Mar 18 17:49:44 UTC 2019
Thanks, I didn't see RN-Change on the guidance page I was looking at for
the notes. Underlying this change in behavior is an actual issue (that
a BC FIPS provider was causing SunJCE's PBKDF SecKeyFac from working due
to the interaction between the SKF and the underlying Mac from the two
different providers). I'll make the text changes you suggest and we'll
see how it reads.
Thanks for the feedback,
--Jamil
On 3/18/19 10:35 AM, Adam Petcher wrote:
> A couple of comments:
>
> *) I think it would be helpful to also describe the change using API
> terms, so it is more clear to programmers who may not recognize all
> the crypto terminology. Perhaps: "... will now exclusively use the
> SunJCE Mac service for the underlying pseudorandom function (PRF)."
>
> *) It's labeled RN-IssueFixed, but the text describes a change in
> behavior, not an issue. Maybe add a sentence like: "This change fixes
> an issue where..." Or perhaps use RN-Change, if the purpose of the
> note is to describe the change in behavior.
>
> On 3/18/2019 12:48 PM, Jamil Nimeh wrote:
>> Hi guys,
>>
>> Can someone give a quick review for the release note for JDK-8218723
>> (the fix for SunJCE PBKDF2 SecretKeyFactories using SunJCE for the
>> underlying PRF)? Should be really quick. I have it here:
>>
>> https://bugs.openjdk.java.net/browse/JDK-8220791
>>
>> Thanks,
>>
>> --Jamil
>>
More information about the security-dev
mailing list