Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8254711

Add JFR events for security crypto algorithms

    Details

    • Type: Enhancement
    • Status: Open
    • Priority: P4
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: security-libs
    • Labels:
      None

      Description

      It would be useful to record an event each time a JCE cryptographic service for a specific algorithm is requested and/or used. This would help users determine what crypto algorithms their applications are using, and help flag/detect usages of weak algorithms. The JDK does not currently disable weak algorithms at the JCE layer, so these events would help users spot direct or other usages of these algorithms from which they could then determine if it is a security risk or not. It could also potentially record algorithms supplied by 3rd-party JCE providers.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                coffeys Sean Coffey
                Reporter:
                mullan Sean Mullan
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated: