Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8224559

Add RFC8410 certificate and TLS ECDH support for x25519/x448

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: P4 P4
    • None
    • 13
    • security-libs
    • None

      RFC 8410 describes safe curves for X.509 (e.g. x25519/x448). We can parse ECDH type certificates, but they aren't used correctly because the type is unknown.

        Key: algorithm = 1.3.101.110, unparsed keybits =
      0000: 85 20 F0 09 89 30 A7 54 74 8B 7D DC B4 3E F7 5A . ...0.Tt....>.Z

      As a result, long term ECDH keys for TLS_ECDH ciphersuites won't be be used.

      There are some sample keys in RFC 8410.

            jnimeh Jamil Nimeh
            wetmore Bradford Wetmore
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: