-
Type:
Enhancement
-
Resolution: Unresolved
-
Priority:
P4
-
None
-
Affects Version/s: None
-
Component/s: security-libs
-
None
The signature in a signed JAR is represented by a PKCS #7 SignedData structure. Within its SignerInfo, the digestAlgorithm field specifies the algorithm to hash signed attributes. Its strength should match that of the signature algorithm. Previously. this algorithm was determined by the signature algorithm. However, with ML-DSA support as defined in RFC 9882, a single ML-DSA parameter set can work with multiple digest algorithms. To support this flexibility, a new `JarSigner.Builder` method and a correspondent `jarsigner` option are needed to allow users choose their preferred digest algorithm.
- relates to
-
JDK-8349732 Add support for JARs signed with ML-DSA
-
- Resolved
-