Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8298721

Elliptic Curve Cryptography (ECC) Brainpool curves

    XMLWordPrintable

Details

    • Enhancement
    • Status: Open
    • P3
    • Resolution: Unresolved
    • None
    • None
    • security-libs
    • None

    Description

      The Brainpool curves are defined in RFC 5639, and was introduced in JDK 11 with JDK-7007966. At that time the implementation was native code based. As there were some known security challenges, brainpool curves were deprecated in JDK 14 with JDK-8234924 and the implementation was removed with JDK-8235710 in JDK 16.

      However, Brainpool curves have been used in practice. There are voices[1][2] to add them back.

      [1]: https://mail.openjdk.org/pipermail/security-dev/2022-December/033839.html
      [2]: https://mail.openjdk.org/pipermail/security-dev/2022-November/033428.html

      Attachments

        Issue Links

          relates to

          Enhancement - null JDK-7007966 Add Brainpool ECC support (RFC 5639)

          • P3 - Major loss of function.
          • Resolved

          Enhancement - null JDK-8234924 Deprecate the legacy elliptic curves for removal

          • P3 - Major loss of function.
          • Resolved

          CSR - null JDK-8204836 Add Brainpool ECC support (RFC 5639)

          • P3 - Major loss of function.
          • Closed

          CSR - null JDK-8235184 Deprecate the legacy elliptic curves for removal

          • P3 - Major loss of function.
          • Closed

          Activity

            People

              xuelei Xuelei Fan
              xuelei Xuelei Fan
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated: