RFR: 8284553: Deprecate the DEFAULT static field of OAEPParameterSpec [v2]

Sean Mullan mullan at openjdk.java.net
Mon Apr 18 17:39:44 UTC 2022


On Wed, 13 Apr 2022 19:27:00 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

>> This trivial change is to deprecate the DEFAULT static field of OAEPParameterSpec class. Wordings are mostly the same as the previous PSSParameterSpec deprecation change. Rest are just minor code re-factoring.
>> 
>> The CSR will be filed once review is somewhat finished.
>> 
>> Thanks,
>> Valerie
>
> Valerie Peng has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Update w/ review feedback.

src/java.base/share/classes/javax/crypto/spec/OAEPParameterSpec.java line 100:

> 98:      *         standard. Some of these defaults are no longer recommended due
> 99:      *         to advances in cryptanalysis -- see the
> 100:      *         <a href="https://www.rfc-editor.org/rfc/rfc8017#appendix-B.1">Appendix B.1</a>

In the URL text, you should still say this is from RFC 8017. Suggest changing these two lines to:

     *         to advances in cryptanalysis -- see
     *         <a href="https://www.rfc-editor.org/rfc/rfc8017#appendix-B.1">Appendix B.1 of RFC 8017</a>

-------------

PR: https://git.openjdk.java.net/jdk/pull/8191



More information about the security-dev mailing list