Deprioritize HMAC-MD5 in default TLS/SSL cipher suites.
Alex Klyubin authored
Although HMAC-MD5 is not yet broken, the foundations are now much
more shaky that those of HMAC-SHA.
See http://tools.ietf.org/html/rfc6151.

This CL also adds a comment about the key rules governing the
preference order of cipher suites used by default.

Bug: 11220570
Change-Id: I2a2fe4d427650081637efc14fd7c427a33cbea7e
f80cadc4
Name Last commit Last update
util
AbstractSessionContext.java
AlertException.java
AlertProtocol.java
Appendable.java
ByteArray.java
CertPinManager.java
CertificateMessage.java
CertificateRequest.java
CertificateVerify.java
ChainStrengthAnalyzer.java
CipherSuite.java
ClientHandshakeImpl.java
ClientHello.java
ClientKeyExchange.java
ClientSessionContext.java
ConnectionState.java
ConnectionStateSSLv3.java
ConnectionStateTLS.java
ContentType.java
DHParameters.java
DataStream.java
DefaultSSLContextImpl.java
DelegatedTask.java
DigitalSignature.java
EndOfBufferException.java
EndOfSourceException.java
FileClientSessionCache.java
Finished.java
Handshake.java
HandshakeIODataStream.java
HandshakeProtocol.java
HelloRequest.java
JSSEProvider.java
KeyManagerFactoryImpl.java
KeyManagerImpl.java
Logger.java
Message.java
NativeCrypto.java
OpenSSLBIOInputStream.java
OpenSSLCipher.java
OpenSSLCipherContext.java
OpenSSLCipherRSA.java
OpenSSLContextImpl.java
OpenSSLDSAKeyFactory.java
OpenSSLDSAKeyPairGenerator.java
OpenSSLDSAParams.java
OpenSSLDSAPrivateKey.java
OpenSSLDSAPublicKey.java
OpenSSLDigestContext.java
OpenSSLECDHKeyAgreement.java
OpenSSLECGroupContext.java
OpenSSLECKeyFactory.java
OpenSSLECKeyPairGenerator.java
OpenSSLECPointContext.java
OpenSSLECPrivateKey.java
OpenSSLECPublicKey.java
OpenSSLEngine.java
OpenSSLKey.java
OpenSSLKeyHolder.java
OpenSSLMac.java
OpenSSLMessageDigestJDK.java
OpenSSLProvider.java
OpenSSLRSAKeyFactory.java
OpenSSLRSAKeyPairGenerator.java
OpenSSLRSAPrivateCrtKey.java
OpenSSLRSAPrivateKey.java
OpenSSLRSAPublicKey.java
OpenSSLRandom.java
OpenSSLSecretKey.java
OpenSSLServerSocketFactoryImpl.java
OpenSSLServerSocketImpl.java
OpenSSLSessionImpl.java
OpenSSLSignature.java
OpenSSLSignatureRawRSA.java
OpenSSLSocketFactoryImpl.java
OpenSSLSocketImpl.java
OpenSSLSocketImplWrapper.java
OpenSSLX509CRL.java
OpenSSLX509CRLEntry.java
OpenSSLX509CertPath.java
OpenSSLX509Certificate.java
OpenSSLX509CertificateFactory.java
PRF.java
PinEntryException.java
PinFailureLogger.java
PinListEntry.java
PinManagerException.java
Platform.java
ProtocolVersion.java
SSLBufferedInput.java
SSLClientSessionCache.java
SSLContextImpl.java
SSLEngineAppData.java
SSLEngineDataStream.java
SSLEngineImpl.java
SSLInputStream.java
SSLParametersImpl.java
SSLRecordProtocol.java
SSLServerSessionCache.java
SSLServerSocketFactoryImpl.java