Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8153005

Upgrade the default PKCS12 encryption/MAC algorithms

    XMLWordPrintable

Details

    Backports

      Description

        PKCS12 is a standard file format for storing keys and certs that is widely used by PKI applications. It has been available in the JDK for more than 15 years.

        The default PKCS12 algorithms for confidentiality and integrity currently make use of SHA-1 hashes. SHA-1 is no longer universally recommended. We should examine supporting alternative algorithms that are stronger and that make use of SHA-2 hashes.

        Interoperability concerns will also need to be examined before upgrading the default algorithms.

        Attachments

          Issue Links

            Activity

              People

                weijun Weijun Wang
                vinnie Vincent Ryan
                Votes:
                0 Vote for this issue
                Watchers:
                9 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: