Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8153005

Upgrade the default PKCS12 encryption/MAC algorithms

    XMLWordPrintable

    Details

      Backports

        Description

        PKCS12 is a standard file format for storing keys and certs that is widely used by PKI applications. It has been available in the JDK for more than 15 years.

        The default PKCS12 algorithms for confidentiality and integrity currently make use of SHA-1 hashes. SHA-1 is no longer universally recommended. We should examine supporting alternative algorithms that are stronger and that make use of SHA-2 hashes.

        Interoperability concerns will also need to be examined before upgrading the default algorithms.

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                weijun Weijun Wang
                Reporter:
                vinnie Vincent Ryan
                Votes:
                0 Vote for this issue
                Watchers:
                9 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: