Javax.crypto JDK source code, again

Question

I was looking for javax.crypto JDK source code and I could not find it. Either this is due to my inability to distort the lawsuit, or there must be a reason why the code is not available (JDK must be open source, right?). I assume that the current jdk javax.crypto has a mandate requested by the NSA, which makes the open source release inconvenient.

My questions are as follows:

• Where is jdk javax.crypto source code located?
• If, in my opinion, the jdk javax.crypto source code is not available, how can I check if my fears that it contains a backdoor are justified or not?

See Where to find javax.crypto source code?

Answer 1

Sources are available through Mercurial . For example, sources for jdk8-b132 javax.crypto : here .

Note that if you suspect a backdoor, you do not have a (simple) way to verify that these sources are actually sources of binary files you use . You must create the JDK yourself to be sure ...