JDK-8225808 : Use SHA-256 for javap classfile checksum
  • Type: CSR
  • Component: tools
  • Sub-Component: javap
  • Priority: P3
  • Status: Closed
  • Resolution: Approved
  • Fix Versions: 14
  • Submitted: 2019-06-14
  • Updated: 2019-06-17
  • Resolved: 2019-06-17
Related Reports
CSR :  
Relates :  
Description
Summary
-------
Change the message digest algorithm from MD5 to SHA-256

Problem
-------

javap includes an MD5 checksum in its verbose output. This should be updated to use a more modern algorithm.

Solution
--------

Change the algorithm to use SHA-256.

Specification
-------------

The man page is updated to refer to SHA-256.


    @@ -84,7 +84,7 @@
     :   Prints internal type signatures.
 
     `-sysinfo`
    -:   Shows system information (path, size, date, MD5 hash) of the class being
    +:   Shows system information (path, size, date, SHA-256 hash) of the class being processed.
 
     `-constants`

Comments
Filed P4 JDK-8226278
17-06-2019

Seems fine. As follow-up work, should there be an option to specify which hash algorithm is desired? Moving to Approved.
17-06-2019