-
CSR
-
Resolution: Approved
-
P3
-
None
-
minimal
-
No behavior change.
-
Other
-
SE
Summary
Add and remove several items from the Java Security Standard Algorithm Names document to reflect the current algorithms we provided.
Problem
Some new algorithms are provided but not documented yet.
On the other hand, we mistakenly added "XDH", "X25519", and "X448" into the AlgorithmParameters
section but in fact no parameters have been defined for these algorithms and we have provided none in our security providers. Therefore they should be removed. As RFC 8410 where these algorithms are defined points out, "For all of the OIDs, the parameters MUST be absent."
Solution
- Add "GCM" to
AlgorithmParamers
. - Remove "XDH", "X25519", and "X448"
from
AlgorithmParamers
. - Add "HmacSHA512/224" and "HmacSHA512/256"
to
Mac
. - Add "Ed25519" and "Ed448" to
NamedParametersSpec
.
Specification
In the AlgorithmParameters
table:
+GCM Parameters for use with the Galois/Counter Mode (GCM)
+ cipher mode, as defined in [RFC 5084](https://tools.ietf.org/html/rfc5084).
-
-XDH Parameters for Diffie-Hellman key agreement with
- elliptic curves as defined in
- [RFC 7748](https://tools.ietf.org/html/rfc7748).
-
-X25519 Parameters for Diffie-Hellman key agreement with
- Curve25519 as defined in
- [RFC 7748](https://tools.ietf.org/html/rfc7748).
-
-X448 Parameters for Diffie-Hellman key agreement with
- Curve448 as defined in
- [RFC 7748](https://tools.ietf.org/html/rfc7748).
In the Mac
section:
HmacMD5 Key generator for use with the HmacMD5 algorithm.
HmacSHA1 \ Key generator for use with the various flavors of the HmacSHA
HmacSHA224 \ algorithms.
HmacSHA256 \
HmacSHA384 \
HmacSHA512 \
+HmacSHA512/224 \
+HmacSHA512/256 \
HmacSHA3-224 \
HmacSHA3-256 \
HmacSHA3-384 \
In the NamedParameterSpec
table:
+
+Ed25519 Elliptic curve signature scheme using the edwards25519 curve defined
+ in [RFC 8032](https://tools.ietf.org/html/rfc8032).
+
+Ed448 Elliptic curve signature scheme using the edwards448 curve defined
+ in [RFC 8032](https://tools.ietf.org/html/rfc8032).
- csr of
-
JDK-8288616 Updating Java Security Standard Algorithm Names
-
- Resolved
-