Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8254711

Add JFR events for security crypto algorithms

    XMLWordPrintable

    Details

    • Type: Enhancement
    • Status: Open
    • Priority: P4
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: security-libs

      Description

      It would be useful to record an event each time a JCE cryptographic service for a specific algorithm is requested and/or used. This would help users determine what crypto algorithms their applications are using, and help flag/detect usages of weak algorithms. The JDK does not currently disable weak algorithms at the JCE layer, so these events would help users spot direct or other usages of these algorithms from which they could then determine if it is a security risk or not. It could also potentially record algorithms supplied by 3rd-party JCE providers.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              coffeys Sean Coffey
              Reporter:
              mullan Sean Mullan
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated: