JDK-6353783 : Remove 2048 bit RSA keysize limit from local_policy.jar
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Affected Version: 6
  • Priority: P2
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2005-11-21
  • Updated: 2010-04-02
  • Resolved: 2005-12-03
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
Other JDK 6
5.0u7Fixed 6 b63Fixed
Description
The default local_policy.jar we ship contains a keysize limit of 2048 bit for RSA encryption. According to information from the legal experts in Solaris, this is not necessary and can be safely removed. The limit for symmetric ciphers needs to remain, unfortunately.
Comments
EVALUATION Valerie is in the process of fixing this, assiging her as RE. Codereview complete, awaiting her putback. Our RSA Cipher implementation only processes bytes up to the byte array length used to represent the modulus value, so this impl won't be used as a full symmetric cipher. See RSACipher.java for more info.
28-11-2005