Do not use short-keyed TLS/SSL cipher suites by default.
Alex Klyubin authored
This removes TLS/SSL cipher suites with bulk cipher secret keys
shorter than 80 bits from the list of cipher suites used by default:
* export-strength cipher suites, and
* cipher suites using DES (but not 3DES) as their bulk cipher.

Bug: 11220570
Change-Id: I04e30f6d634801b36018fecc8f2b257fc6b7adfc
68f4753f
Name Last commit Last update
util
AbstractSessionContext.java
AlertException.java
AlertProtocol.java
Appendable.java
ByteArray.java
CertPinManager.java
CertificateMessage.java
CertificateRequest.java
CertificateVerify.java
ChainStrengthAnalyzer.java
CipherSuite.java
ClientHandshakeImpl.java
ClientHello.java
ClientKeyExchange.java
ClientSessionContext.java
ConnectionState.java
ConnectionStateSSLv3.java
ConnectionStateTLS.java
ContentType.java
DHParameters.java
DataStream.java
DefaultSSLContextImpl.java
DelegatedTask.java
DigitalSignature.java
EndOfBufferException.java
EndOfSourceException.java
FileClientSessionCache.java
Finished.java
Handshake.java
HandshakeIODataStream.java
HandshakeProtocol.java
HelloRequest.java
JSSEProvider.java
KeyManagerFactoryImpl.java
KeyManagerImpl.java
Logger.java
Message.java
NativeCrypto.java
OpenSSLBIOInputStream.java
OpenSSLCipher.java
OpenSSLCipherContext.java
OpenSSLCipherRSA.java
OpenSSLContextImpl.java
OpenSSLDSAKeyFactory.java
OpenSSLDSAKeyPairGenerator.java
OpenSSLDSAParams.java
OpenSSLDSAPrivateKey.java
OpenSSLDSAPublicKey.java
OpenSSLDigestContext.java
OpenSSLECDHKeyAgreement.java
OpenSSLECGroupContext.java
OpenSSLECKeyFactory.java
OpenSSLECKeyPairGenerator.java
OpenSSLECPointContext.java
OpenSSLECPrivateKey.java
OpenSSLECPublicKey.java
OpenSSLEngine.java
OpenSSLKey.java
OpenSSLKeyHolder.java
OpenSSLMac.java
OpenSSLMessageDigestJDK.java
OpenSSLProvider.java
OpenSSLRSAKeyFactory.java
OpenSSLRSAKeyPairGenerator.java
OpenSSLRSAPrivateCrtKey.java
OpenSSLRSAPrivateKey.java
OpenSSLRSAPublicKey.java
OpenSSLRandom.java
OpenSSLSecretKey.java
OpenSSLServerSocketFactoryImpl.java
OpenSSLServerSocketImpl.java
OpenSSLSessionImpl.java
OpenSSLSignature.java
OpenSSLSignatureRawRSA.java
OpenSSLSocketFactoryImpl.java
OpenSSLSocketImpl.java
OpenSSLSocketImplWrapper.java
OpenSSLX509CRL.java
OpenSSLX509CRLEntry.java
OpenSSLX509CertPath.java
OpenSSLX509Certificate.java
OpenSSLX509CertificateFactory.java
PRF.java
PinEntryException.java
PinFailureLogger.java
PinListEntry.java
PinManagerException.java
Platform.java
ProtocolVersion.java
SSLBufferedInput.java
SSLClientSessionCache.java
SSLContextImpl.java
SSLEngineAppData.java
SSLEngineDataStream.java
SSLEngineImpl.java
SSLInputStream.java
SSLParametersImpl.java
SSLRecordProtocol.java
SSLServerSessionCache.java
SSLServerSocketFactoryImpl.java