Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8345411

Update XML Security for Java to 3.0.5

XMLWordPrintable

    • Icon: CSR CSR
    • Resolution: Approved
    • Icon: P3 P3
    • 25
    • security-libs
    • None
    • source
    • minimal
    • New algorithms.
    • Java API
    • SE

      Summary

      Update the XML Signature implementation (in the java.xml.crypto module) in the JDK to version 3.0.5 of Apache Santuario with 4 new SHA-3 based Elliptic Curve XML signature methods.

      Problem

      Apache Santuario 3.0.5 introduced 4 new Elliptic Curve signature methods. We should support them and add their URIs as static final strings in the SignatureMethod class.

      Solution

      Import Apache Santuario 3.0.5.

      Specification

      Add these fields into the javax.xml.crypto.dsig.SignatureMethod interface:

      /**
       * The <a href="http://www.w3.org/2021/04/xmldsig-more#ecdsa-sha3-224">
       * ECDSA-SHA3-224</a> signature method algorithm URI.
       *
       * @since 25
       */
      String ECDSA_SHA3_224 =
              "http://www.w3.org/2021/04/xmldsig-more#ecdsa-sha3-224";
      
      /**
       * The <a href="http://www.w3.org/2021/04/xmldsig-more#ecdsa-sha3-256">
       * ECDSA-SHA3-256</a> signature method algorithm URI.
       *
       * @since 25
       */
      String ECDSA_SHA3_256 =
              "http://www.w3.org/2021/04/xmldsig-more#ecdsa-sha3-256";
      
      /**
       * The <a href="http://www.w3.org/2021/04/xmldsig-more#ecdsa-sha3-384">
       * ECDSA-SHA3-384</a> signature method algorithm URI.
       *
       * @since 25
       */
      String ECDSA_SHA3_384 =
              "http://www.w3.org/2021/04/xmldsig-more#ecdsa-sha3-384";
      
      /**
       * The <a href="http://www.w3.org/2021/04/xmldsig-more#ecdsa-sha3-512">
       * ECDSA-SHA3-512</a> signature method algorithm URI.
       *
       * @since 25
       */
      String ECDSA_SHA3_512 =
              "http://www.w3.org/2021/04/xmldsig-more#ecdsa-sha3-512";

            weijun Weijun Wang
            youlguo Youliang Guo
            Sean Mullan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: