[Bug classpath/26012] New: Duplicate cryptogaphic code

[csm at gnu dot org]

We've recently merged GNU Crypto and Jessie into Classpath, which provide JCE
and JSSE algorithms, respectively. We now, however, have a few duplicated
algorithms scattered around, because Classpath had a few of these algorithms
already.

Some duplicates I can think of right now include:

  - MD5 and SHA-1 message digests.
  - DSA and RSA signatures.
  - Diffie-Hellman key exchange.

Of course, it isn't all that clear which implementation to use. For the
digests, GNU Crypto's version is superior, but Classpath's DSA and RSA
signature implementations conform to a standard that any J2SE environment would
require (ASN.1); and GNU Crypto's Diffie Hellman implementation has no JCE
adapter written for it, but Jessie uses GNU Crypto's version directly. So,
"removing duplicates" is not all that clear-cut, because sometimes either
version has its benefits. In short, the crypto providers are in kind of a mess
right now, and should be cleaned up.


-- 
           Summary: Duplicate cryptogaphic code
           Product: classpath
           Version: 0.21
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: classpath
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: csm at gnu dot org


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26012