RFR: 8286090: Add RC2/RC4 to jdk.security.legacyAlgorithms
Sean Mullan
mullan at openjdk.java.net
Mon May 16 13:03:14 UTC 2022
On Sat, 14 May 2022 01:51:34 GMT, Hai-May Chao <hchao at openjdk.org> wrote:
> Please review the small change to add RC2 and ARCFOUR to jdk.security.legacyAlgorithms. So it enables keytool -genseckey, -list, and -importkeystore commands to warn users when RC2 or ARCFOUR algorithm is used.
test/jdk/sun/security/tools/keytool/WeakSecretKeyTest.java line 67:
> 65:
> 66: SecurityTools.keytool("-keystore ks.p12 -storepass changeit " +
> 67: "-genseckey -keyalg RC4 -alias rc4key -keysize 1024")
`-keysize` should be 128.
-------------
PR: https://git.openjdk.java.net/jdk/pull/8712
More information about the security-dev
mailing list