Bug ID: JDK-8153005 Upgrade the default PKCS12 encryption/MAC algorithms

JDK-8153005 : Upgrade the default PKCS12 encryption/MAC algorithms

Type: Enhancement
Component: security-libs
Sub-Component: java.security

Priority: P3
Status: Resolved
Resolution: Fixed

Submitted: 2016-03-29
Updated: 2024-10-30
Resolved: 2020-10-30

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

JDK 11	JDK 16	JDK 7	JDK 8
11.0.12-oracleFixed	16 b23Fixed	7u311Fixed	8u301Fixed

Related Reports

Blocks :	JDK-8076190 - Customizing the generation of a PKCS12 keystore
CSR :	JDK-8228481 - Upgrade the default PKCS12 encryption/MAC algorithms
Relates :	JDK-8162628 - The CACERTS keystore type
Relates :	JDK-8214513 - A PKCS12 keystore from Java 8 using custom PBE parameters cannot be read in Java 11
Relates :	JDK-8202837 - PBES2 AlgorithmId encoding error in PKCS12 KeyStore
Relates :	JDK-8180710 - PBKDF2 SecretKeyFactory and PBES2 Cipher algorithms
Relates :	JDK-8267880 - Upgrade the default PKCS12 MAC algorithm
Relates :	JDK-8267599 - Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u
Relates :	JDK-8285827 - Describe the keystore.pkcs12.legacy system property in the java.security file
Relates :	JDK-8267975 - Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u
Relates :	JDK-8006591 - Protect keystore entries using stronger PBE algorithms

Sub Tasks

JDK-8242069 :	Release Note: Upgraded the Default PKCS12 Encryption and MAC Algorithms - Closed
JDK-8256507 :	Add a micro benchmark for JDK-8153005 - Resolved

Description

PKCS12 is a standard file format for storing keys and certs that is widely used by PKI applications. It has been available in the JDK for more than 15 years.

The default PKCS12 algorithms for confidentiality and integrity currently make use of SHA-1 hashes. SHA-1 is no longer universally recommended. We should examine supporting alternative algorithms that are stronger and that make use of SHA-2 hashes.

Interoperability concerns will also need to be examined before upgrading the default algorithms.

Comments

Fix Request (11u) Should get backported for parity with 11.0.12-oracle. CSR covers 11-pool and is approved. Change doesn't apply cleanly. Review thread: http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2021-April/006024.html
30-04-2021
Changeset: f77a6585 Author: Weijun Wang <weijun@openjdk.org> Date: 2020-10-30 13:23:33 +0000 URL: https://github.com/openjdk/jdk/commit/f77a6585
30-10-2020
MSIE 11 has full support for strong algorithms and the NONE algorithm. Firefox supports strong algorithms on key protection and Mac but not certificate protection (strangely, pk12util does) but not NONE algorithm. Chrome uses operating system's keychain, and supports neither on Mac.
14-12-2018
JDK-8006591 has already added a security property for the key encryption algorithm. We still need to add one for the Mac algorithm. Then we can adjust the default values.
16-03-2018