Added. I thought everyone knows DES is weak and there's no need to emphasis it.

--Max

> On Nov 5, 2019, at 12:16 AM, Sean Mullan <sean.mul...@oracle.com> wrote:
> 
> On 11/1/19 11:07 PM, Weijun Wang wrote:
>> Bug: https://bugs.openjdk.java.net/browse/JDK-8214024
>> CSR: https://bugs.openjdk.java.net/browse/JDK-8233427
> 
> For the CSR, in the Problem section, you should add a similar 
> statement/reference about DES being weak as you do for DSA, for example:
> 
> https://www.nist.gov/news-events/news/2005/06/nist-withdraws-outdated-data-encryption-standard
> 
> and:
> 
> https://tools.ietf.org/html/rfc4772
> 
>> Webrev: http://cr.openjdk.java.net/~weijun/8214024/webrev.00/
> 
> Will look at the code changes later.
> 
> --Sean
> 
>> For most test changes, I simply added a "-keyalg DSA" to preserve the old 
>> behavior.
>> DeprecateKeyAlg.java is renamed to RemoveKeyAlgDefault.java and detection of 
>> warnings is changed to that of errors. 3 lines in this test are moved to 
>> another test.
>> Thanks,
>> Max

Reply via email to