RFR: 8241306: Add SignatureMethodParameterSpec subclass for RSASSA-PSS params [v4]

Weijun Wang weijun at openjdk.java.net
Fri Apr 9 23:18:08 UTC 2021


> This enhancement contains the following code changes:
> 
> 1. Create a new public API `javax/xml/crypto/dsig/spec/RSAPSSParameterSpec` and remove the internal one.
> 2. Update marshaling and unmarshaling code inside `DOMRSAPSSSignatureMethod` so it understands extra fields in `PSSParameterSpec` and is aware of the defaults in both directions.
> 3. Update `DOMSignedInfo` so that secure validation can restrict `DigestMethod` used inside `RSAPSSParameterSpec`
> 4. Tests

Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:

  more digest methods and spec change

-------------

Changes:
  - all: https://git.openjdk.java.net/jdk/pull/3181/files
  - new: https://git.openjdk.java.net/jdk/pull/3181/files/5b88fff4..82c29fea

Webrevs:
 - full: https://webrevs.openjdk.java.net/?repo=jdk&pr=3181&range=03
 - incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=3181&range=02-03

  Stats: 8 lines in 2 files changed: 5 ins; 0 del; 3 mod
  Patch: https://git.openjdk.java.net/jdk/pull/3181.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/3181/head:pull/3181

PR: https://git.openjdk.java.net/jdk/pull/3181


More information about the security-dev mailing list