Loading...

XML

Word

Printable

Type: Enhancement
Resolution: Fixed
Priority: P3
Fix Version/s: 16
Affects Version/s: None
Component/s: security-libs
Labels:
- release-note=yes

Subcomponent:
java.security
Resolved In Build:
b21

We need to support RSASSA-PSS (https://tools.ietf.org/html/rfc4056) and EdDSA (https://www.rfc-editor.org/rfc/rfc8419.html) for jar signing. This would include:

0. Decide the proper block type name: "RSASSA-PSS" is a little long, "EdDSA" contains a lowercase letter.
1. Support new block types in SignatureFileVerifier.java
2. Translate between sigAlg and encAlg/digestAlg in AlgorithmId.java
3. Support for SHAKE256 name and OID in AlgorithmId.java
4. Updates to jarsigner tooldoc and JAR file spec
5. Tests

csr for

JDK-8245274 Signed JAR support for RSASSA-PSS and EdDSA

Closed

duplicates

JDK-8230420 digestEncryptionAlgorithm in SignerInfo isn't using full signature algorithm for EC

Closed

relates to

JDK-8255536 Remove the directsign property and option

Resolved

JDK-8255494 PKCS7 should use digest algorithm to verify the signature

Closed

JDK-8247837 JAR spec change to include more details on the signature block

Open

JDK-8166597 Crypto support for the EdDSA Signature Algorithm

Resolved

JDK-8254942 Update the JAR file spec on EC and RSA signature block types

Resolved

links to

Commit openjdk/jdk/839f01dd

Review openjdk/jdk/322

(2 relates to, 2 links to)

Release Note: Signed JAR Support for RSASSA-PSS and EdDSA

Closed

Weijun Wang

Assignee:: Weijun Wang

Reporter:: Weijun Wang

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2020-04-02 20:41

Updated:: 2024-12-09 14:12

Resolved:: 2020-10-21 07:19

Details

Description

Attachments

Issue Links

Sub-Tasks

Activity

People

Dates