On Mon, 16 May 2022 12:59:09 GMT, Sean Mullan <[email protected]> wrote:
>> Please review the small change to add RC2 and ARCFOUR to
>> jdk.security.legacyAlgorithms. So it enables keytool -genseckey, -list, and
>> -importkeystore commands to warn users when RC2 or ARCFOUR algorithm is used.
>
> test/jdk/sun/security/tools/keytool/WeakSecretKeyTest.java line 67:
>
>> 65:
>> 66: SecurityTools.keytool("-keystore ks.p12 -storepass changeit " +
>> 67: "-genseckey -keyalg RC4 -alias rc4key -keysize 1024")
>
> `-keysize` should be 128.
Oops, I stand corrected. 1024 is a valid RC4 key size.
-------------
PR: https://git.openjdk.java.net/jdk/pull/8712
