Is there an algorithm that computes the strength of a digest alg?
bradford.wetmore at oracle.com
Sun Oct 23 20:39:28 PDT 2011
I don't know of anything like that. As Michael points out, key Lengths
by themselves are not always a good indicator of relative stength.
BTW, JSSE hard-codes the choices.
On 10/23/2011 6:52 PM, Weijun Wang wrote:
> Hi Andrew
> I need a method
> boolean isWeakerThan(String a1, String a2)
> so that isWeakerThan("MD5", "SHA1") returns true and
> isWeakerThan("SHA-256", "SHA1") returns false. I know you have done a
> lot of constraints works in JDK 7. Do you have an existing one?
> Otherwise, I plan to manually assign a value to each known algorithm and
> compare it.
More information about the security-dev