RFR: 8241306: Add SignatureMethodParameterSpec subclass for RSASSA-PSS params [v3]
Sean Mullan
mullan at openjdk.java.net
Fri Apr 9 20:55:12 UTC 2021
On Fri, 9 Apr 2021 19:54:22 GMT, Weijun Wang <weijun at openjdk.org> wrote:
>> I'm ok with not supporting SHA-1, although adding it would not be a security issue. It is blocked by default now, but it can be re-enabled, and SHA-1 in general is still available in the JDK.
>>
>> I'm fine with adding support for SHA-224 and SHA-3 as part of this issue. You can add support for all the algorithms that we have the underlying crypto support for.
>
> Not sure if I got it, are you OK with adding SHA-1? It must be listed here to be supported.
Let's not add it.
-------------
PR: https://git.openjdk.java.net/jdk/pull/3181
More information about the security-dev
mailing list