Loading...

XML

Word

Printable

Type: Enhancement
Resolution: Fixed
Priority: P3
Fix Version/s: 16
Affects Version/s: None
Component/s: security-libs
Labels:

Subcomponent:
java.security
Resolved In Build:
b23

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-8258403	11.0.12-oracle	Prasadarao Koppula	P3	Resolved	Fixed	b01
JDK-8267028	11.0.12	Weijun Wang	P3	Resolved	Fixed	b02
JDK-8258401	8u301	Sean Coffey	P3	Resolved	Fixed	b03
JDK-8266271	7u321	Prasadarao Koppula	P3	Resolved	Fixed	b01
JDK-8258402	7u311	Prasadarao Koppula	P3	Resolved	Fixed	b04

PKCS12 is a standard file format for storing keys and certs that is widely used by PKI applications. It has been available in the JDK for more than 15 years.

The default PKCS12 algorithms for confidentiality and integrity currently make use of SHA-1 hashes. SHA-1 is no longer universally recommended. We should examine supporting alternative algorithms that are stronger and that make use of SHA-2 hashes.

Interoperability concerns will also need to be examined before upgrading the default algorithms.

backported by

JDK-8258401 Upgrade the default PKCS12 encryption/MAC algorithms

Resolved

JDK-8258402 Upgrade the default PKCS12 encryption/MAC algorithms

Resolved

JDK-8258403 Upgrade the default PKCS12 encryption/MAC algorithms

Resolved

JDK-8266271 Upgrade the default PKCS12 encryption/MAC algorithms

Resolved

JDK-8267028 Upgrade the default PKCS12 encryption/MAC algorithms

Resolved

csr for

JDK-8228481 Upgrade the default PKCS12 encryption/MAC algorithms

Closed

is blocked by

JDK-8076190 Customizing the generation of a PKCS12 keystore

Resolved

relates to

JDK-8214513 A PKCS12 keystore from Java 8 using custom PBE parameters cannot be read in Java 11

Closed

JDK-8202837 PBES2 AlgorithmId encoding error in PKCS12 KeyStore

Closed

JDK-8180710 PBKDF2 SecretKeyFactory and PBES2 Cipher algorithms

Resolved

JDK-8267880 Upgrade the default PKCS12 MAC algorithm

Resolved

JDK-8006591 Protect keystore entries using stronger PBE algorithms

Closed

JDK-8267599 Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u

Resolved

JDK-8285827 Describe the keystore.pkcs12.legacy system property in the java.security file

Resolved

JDK-8343232 PKCS#12 KeyStore support for RFC 9879: Use of Password-Based Message Authentication Code 1 (PBMAC1)

In Progress

JDK-8267975 Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u

Resolved

JDK-8162628 The CACERTS keystore type

Closed

links to

Commit openjdk/jdk/f77a6585

Review openjdk/jdk/473

(1 csr for, 1 is blocked by, 10 relates to, 2 links to)

1.	Release Note: Upgraded the Default PKCS12 Encryption and MAC Algorithms		Closed	Weijun Wang
2.	Add a micro benchmark for JDK-8153005		Resolved	Weijun Wang

Assignee:: Weijun Wang

Reporter:: Vincent Ryan

Votes:: 0 Vote for this issue

Watchers:: 10 Start watching this issue

Created:: 2016-03-29 08:54

Updated:: 2024-12-09 14:43

Resolved:: 2020-10-30 06:24

Details

Backports

Description

Attachments

Issue Links

Sub-Tasks

Activity

People

Dates