Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8033401

Password Based Encryption example in JCA guide should be updated to use new JDK 8 strong PBE algs

XMLWordPrintable

        See: http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html#PBEEx

        This example uses a weak algorithm: PBEWithMD5AndDES
        This example should be updated to use a stronger alg (ex: PBEWithHmacSHA256AndAES_256) that was added in JDK 8 as part of JEP 121.

        There is also a similar example in the Managing Algorithm Parameters section for Cipher in the JCA guide: http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html#Cipher

              sbhusarapu Sirisha Bhusarapu (Inactive)
              mullan Sean Mullan
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: