RFR: 8288050: Add support of SHA-512/224 and SHA-512/256 to the PBKDF2 and PBES2 impls in SunJCE provider [v5]

Valerie Peng valeriep at openjdk.org
Wed Jan 25 22:33:59 UTC 2023


> This RFE enhances existing PBE algorithms with the "SHA512/224" and "SHA512/256" support. 
> Current transformation parsing in javax.crypto.Cipher class is re-written to handle the additional "/" in the "SHA512/224" and "SHA512/256" algorithm names. Existing tests are updated with the additional new algorithms.

Valerie Peng has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains six additional commits since the last revision:

 - Merge branch 'master' of https://github.com/openjdk/jdk into JDK-8288050
   so bot can find the CSR for JDK21 and mark the PR complete.
 - address review feedbacks
 - handle the "SHA512/2" lookup of the cipher transformation in a case-insensitive way.
 - remove extra whitespace
 - remove trailing whitespace
 - 8288050: Add support of SHA-512/224 and SHA-512/256 to the PBKDF2 and PBES2 impls in SunJCE provider

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/11339/files
  - new: https://git.openjdk.org/jdk/pull/11339/files/fa2b3dbc..e050123e

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=11339&range=04
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=11339&range=03-04

  Stats: 161222 lines in 4146 files changed: 82411 ins; 53020 del; 25791 mod
  Patch: https://git.openjdk.org/jdk/pull/11339.diff
  Fetch: git fetch https://git.openjdk.org/jdk pull/11339/head:pull/11339

PR: https://git.openjdk.org/jdk/pull/11339


More information about the security-dev mailing list