RFR: 8241306: Add SignatureMethodParameterSpec subclass for RSASSA-PSS params [v3]
Weijun Wang
weijun at openjdk.java.net
Fri Apr 9 17:32:22 UTC 2021
On Fri, 9 Apr 2021 16:44:07 GMT, Sean Mullan <mullan at openjdk.org> wrote:
>> Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:
>>
>> spec word change, no hashCode and equals, test change
>
> src/java.xml.crypto/share/classes/javax/xml/crypto/dsig/spec/RSAPSSParameterSpec.java line 74:
>
>> 72: * {@code MaskGenerationFunction}, 32 as {@code SaltLength}, and 1 as
>> 73: * {@code TrailerField}. This is equivalent to the parameter-less signature
>> 74: * method as defined by http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1.
>
> http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1 is just a placeholder page for the namespace. I would instead link to `SignatureMethod.SHA256_RSA_MGF1` and also reference the RFC for more information. How about:
>
> `This is equivalent to the {@link SignatureMethod#SHA256_RSA_MGF1 parameter-less signature method} as defined in <a href="https://www.ietf.org/rfc/rfc6931.txt#section-2.3.10">RFC 6931</a>.
> `
Correct.
How about:
This is equivalent to the parameter-less signature
method {@link SignatureMethod#SHA256_RSA_MGF1 SHA256_RSA_MGF1} as defined
in <a href="https://tools.ietf.org/html/rfc6931#section-2.3.10">RFC 6931</a>.
SHA256_RSA_MGF1 is not the only parameter-less method so I prefer showing its name.
-------------
PR: https://git.openjdk.java.net/jdk/pull/3181
More information about the security-dev
mailing list