RFR: 8360146: Add system/security property to disable RSAES-PKCS-v1_5 padding
Valerie Peng
valeriep at openjdk.org
Wed Jul 2 02:38:40 UTC 2025
This PR adds a security property "jdk.crypto.supportPKCS1Padding". By default, this property is not set.
However, if this security property "jdk.crypto.supportPKCS1Padding" is set to "false", existing JDK providers, e.g. SunJCE, SunPKCS11, and SunMSCAPI providers. will not provide the RSA w/ PKCS1Padding cipher implementation.
This security property can help users in checking their usage on RSA w/ PKCS1Padding cipher and facilitate the disabling of this particular cipher if so desired.
-------------
Commit messages:
- minor wording changes in java.security property description
- 8360146: Add system/security property to disable RSAES-PKCS-v1_5 padding
Changes: https://git.openjdk.org/jdk/pull/26084/files
Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=26084&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8360146
Stats: 227 lines in 7 files changed: 206 ins; 1 del; 20 mod
Patch: https://git.openjdk.org/jdk/pull/26084.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/26084/head:pull/26084
PR: https://git.openjdk.org/jdk/pull/26084
More information about the security-dev
mailing list