Java: add SHA3 family to list of secure crypto algorithms

[aibaars]

Pull Request checklist

All query authors

• A change note is added if necessary. See the documentation in this repository.
• All new queries have appropriate .qhelp. See the documentation in this repository.
• QL tests are added if necessary. See Testing custom queries in the GitHub documentation.
• New and changed queries have correct query metadata. See the documentation in this repository.

Fixes: #18082

[jcogs33]

Looks good to me, although I think SHA3-224 may be deprecated soon based on NIST's most recent draft revision of Transitioning the Use of Cryptographic Algorithms and Key Lengths. I suppose since the draft is not officially published yet, we can still list SHA3-224 as secure for now?

[aibaars]

Looks good to me, although I think SHA3-224 may be deprecated soon based on NIST's most recent draft revision of Transitioning the Use of Cryptographic Algorithms and Key Lengths. I suppose since the draft is not officially published yet, we can still list SHA3-224 as secure for now?

Thanks for checking that. I think we can just drop the 224 variant. I doubt many people are using it anyway.