Is there an algorithm that computes the strength of a digest alg? (original) (raw)

Bradford Wetmore bradford.wetmore at oracle.com
Mon Oct 24 03:39:28 UTC 2011


I don't know of anything like that. As Michael points out, key Lengths by themselves are not always a good indicator of relative stength.

BTW, JSSE hard-codes the choices.

Brad

On 10/23/2011 6:52 PM, Weijun Wang wrote:

Hi Andrew

I need a method boolean isWeakerThan(String a1, String a2) so that isWeakerThan("MD5", "SHA1") returns true and isWeakerThan("SHA-256", "SHA1") returns false. I know you have done a lot of constraints works in JDK 7. Do you have an existing one? Otherwise, I plan to manually assign a value to each known algorithm and compare it. Thanks Max



More information about the security-dev mailing list