Loading... (original) (raw)

Support X25519 and X448 EC curves for Diffie-Hellman in the JSSE implementation for TLS.

The original scope of this RFE was to implement for TLSv1.3 only, since TLS 1.2 and earlier are organized very differently w.r.t. key agreement. But it appears that there could be interoperability issues if TLS 1.2/1.1/1 aren't supported (see comment below).

backported by

Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8226103 Support X25519 and X448 in TLS

Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8256030 Support X25519 and X448 in TLS

Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8252226 Support X25519 and X448 in TLS

csr for

CSR - null JDK-8224520 Support X25519 and X448 in TLS

duplicates

Bug - A problem which impairs or prevents the functions of the product. JDK-8217709 TLS 1.3 server always answer Hello Retry Request (on chrome)

relates to

Bug - A problem which impairs or prevents the functions of the product. JDK-8260300 Restrict TLS signature schemes in 8u

Bug - A problem which impairs or prevents the functions of the product. JDK-8234467 Some TLSv1.3 handshakes fail with a decode_error rather than negotiating to 1.2

JEP - Java Enhancement Proposal JDK-8145252 JEP 332: Transport Layer Security (TLS) 1.3

Bug - A problem which impairs or prevents the functions of the product. JDK-8257607 Support third-party providers in SunJSSE for EdDSA and XDH

Bug - A problem which impairs or prevents the functions of the product. JDK-8178429 SSLHandshakeException "Unsupported curveId: 29"

Enhancement - null JDK-8171277 Elliptic Curves for Security in Crypto

Enhancement - null JDK-8224650 Add tests to support X25519 and X448 in TLS

(7 relates to)